Resource Center Dallas 2026 Data Breach

The primary source is the “Notice Regarding Data Security Incident” published on Resource Center of Dallas's own website. It directly states that an unauthorized party accessed and/or may have acquired files from portions of the network, the activity window, the investigation, the main data categories identified, and security measures adopted by the organization afterward.

A Massachusetts consumer-notification file confirms the July 15, 2026 sample letter, assistance line, and use of person-specific variable fields in individual letters. A Texas regulatory record supplies the state subset, while Claim Depot connects those official sources and summarizes available state counts and detailed fields. The sources align on the organization, dates, and nature of the event.

Resource Center detected that certain network systems had been affected by a data-security incident. Its official notice says an unauthorized party accessed and/or acquired certain files from portions of the network from about February 4 through February 12. The public text does not disclose the initial entry method, malware used, or identity of the actor.

After detecting the event, the organization immediately began an investigation, contained the network, and notified law enforcement. Specialists examined the extent of the unauthorized activity and whether the files held PII or PHI. The forensic and document review took several months; around July 2, Resource Center identified people whose information may have been involved and began preparing notices.

The information varied by person but could include names, addresses, dates of birth, certain Social Security numbers, driver's-license numbers, government-issued identification numbers, state-identification-card numbers, financial-account information, and other identification information. Each recipient's sample letter was designed to identify the variable fields associated with that person's file.

A combination of name, birth date, SSN, and government identification creates substantial risk of new-account fraud, tax-identity misuse, and targeted phishing. Financial-account information may also support fraudulent payments or account-takeover attempts.

Resource Center explicitly lists medical information and health-insurance information within the possible scope. The state record and source-linked summary also identify medical records among fields that may have been affected. Such data can connect a person to particular care relationships and may be abused for medical-identity misuse or convincing social-engineering attempts.

The public notice does not separately publish clinical subfields such as diagnosis, treatment, prescription, medical-record number, insurance-policy number, or service date. General examples in the protection guidance should not be treated as confirmed incident fields, and undisclosed sensitive details should not be attributed to every person.

Texas Attorney General record BR-0005181 publishes an exact nationwide total of 12,490 people and a Texas subset of 9,048. The 13 Massachusetts residents are another state subset included within the nationwide population and are not added again.

The Massachusetts sample letter says that, as of its date, Resource Center had no evidence that the information was used to commit financial fraud or identity theft. That statement does not guarantee that future misuse will not occur. Because unauthorized file access and/or acquisition is confirmed in the official notice, recipients should continue monitoring financial and healthcare accounts.

The organization contained the network, notified law enforcement, conducted a forensic investigation and document review with outside specialists, reviewed security practices, and implemented additional measures. Notices dated July 15 were sent to affected people. A confidential line at 1-888-201-1486 was established for 90 days from the letter, from 9:00 a.m. to 9:00 p.m. Eastern on weekdays.

Recipients should review credit reports, financial-account statements, and insurance explanation-of-benefits statements for unfamiliar accounts, transactions, or healthcare services. If an SSN or government ID was involved, a credit freeze, fraud alert, and IRS Identity Protection PIN may be appropriate. Personal information or verification codes should not be shared in unexpected messages.