Skip to content

Texas Health and Human Services Commission

Disclosed Jan 16, 20251 year ago68,066 affectedConfirmed

Official notice

The covered entity (CE), Texas Health and Human Services Commission, reported that some of its workforce members inappropriately accessed, used, and/or disclosed the protected health information (PHI) of 94,261 individuals. The PHI involved included names, addresses, dates of birth, social security numbers, financial information, diagnoses, conditions, and other treatment information. The CE notified HHS, the affected individuals and the media. In response to the breach, the CE terminated access to its PHI, sanctioned the workforce members involved, and implemented additional safeguards to monitor access to PHI.

What is known

People affected68,066 (as reported to HHS)
DisclosedJan 16, 2025
AttackHacking
Data exposedNames, Health
SectorInsurance · US
StatusConfirmed

Sources

Source
HHS OCR breach report: Texas Health and Human Services Commission (Health Plan, TX)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalJan 16, 202561,104
HHS OCRtotalJan 568,066

Other breaches at Texas Health and Human Services Commission

BreachAffected
Disclosed Jun 14, 2016Jun 14, 201610 years agoLost or stolen device600
Disclosed Sep 9, 2011Sep 9, 201115 years agoLost or stolen device1,696
History of this record
  • 2026-09-25 · disclosed: 2026-01-05 to 2025-01-16 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Texas Health and Human Services Commission, reported that some of its workforce members inappropriately accessed, used, and/or disclosed the protected health information (PHI) of 94,261 individuals. The PHI involved · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Texas Health and Human Services Commission

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.