CDS in Texas
Disclosed Feb 14, 20251 year ago566 affectedConfirmed
The covered entity (CE), CDS in Texas, reported that an employee emailed the protected health information (PHI) of 566 individuals to the wrong recipients. The PHI involved included demographic information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 566 (as reported to HHS) |
|---|---|
| Disclosed | Feb 14, 2025 |
| Discovered | Sep 26, 2025 |
| Happened | Sep 26, 2025 |
| Attack | Insider |
| Data exposed | Names, Health, Insurance |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Texas Attorney General data security breach report BR-0004671: CDS in Texasoag.my.site.com · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): CDS in Texas (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Feb 14, 2025 | 566 |
| Texas AGresidents of TX | Apr 1, 2025 | 566 |
| Texas AGresidents of TX | Nov 17, 2025 | 7,295 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 566 · backfill source
- 2026-09-25 · disclosed: 2025-04-01 to 2025-02-14 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), CDS in Texas, reported that an employee emailed the protected health information (PHI) of 566 individuals to the wrong recipients. The PHI involved included demographic information. The CE notified HHS, the affected · backfill source
- 2026-09-25 · sector: other to finance · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","health","insurance"] · backfill source
- 2026-09-25 · disclosed: 2025-11-17 to 2025-04-01 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Texas AG), confirmed by Texas AG. Record counts are as reported. Not legal advice.