Dallas County MHMR
Disclosed Apr 3, 20251 year ago553 affectedConfirmed
The covered entity (CE), Dallas County MHMR dba Metrocare Services, reported that an employee sent unencrypted emails to third parties which included the protected health information (PHI) of 553 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 553 (as reported to HHS) |
|---|---|
| Disclosed | Apr 3, 2025 |
| Discovered | Oct 3, 2025 |
| Happened | Sep 9, 2025 |
| Attack | Insider |
| Data exposed | Names, Government IDs, Health, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Texas Attorney General data security breach report BR-0004702: Dallas County MHMRoag.my.site.com · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Dallas County MHMR (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 3, 2025 | 553 |
| Texas AGresidents of TX | Apr 11, 2025 | 542 |
| Texas AGresidents of TX | Dec 3, 2025 | 8,599 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 553 · backfill source
- 2026-09-25 · disclosed: 2025-04-11 to 2025-04-03 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Dallas County MHMR dba Metrocare Services, reported that an employee sent unencrypted emails to third parties which included the protected health information (PHI) of 553 individuals. The PHI involved included clini · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","government-id","health","insurance"] · backfill source
- 2026-09-25 · disclosed: 2025-12-03 to 2025-04-11 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Texas AG), confirmed by Texas AG. Record counts are as reported. Not legal advice.