McEwen & Associates Data Breach (20.1 Thousand People Affected)

The McEwen & Associates data breach affected 20,106 people in a June 23-24, 2025 incident involving identity, financial, and health information.

Texas Attorney General record BR-0005196 says that 4,098 of the affected people were Texas residents and that individuals were notified by U.S. mail.

What Happened in the McEwen & Associates Breach?

The Texas record says the incident began on June 23, 2025 and ended on June 24. The U.S. Department of Health and Human Services breach portal lists McEwen & Associates in an August 21, 2025 “Hacking/IT Incident” submission and identifies a network server as the affected environment.

The Texas portal lists May 1, 2026 as the discovery date and July 23, 2026 as the publication date. The public official records do not disclose the initial access method, exploited vulnerability, or responsible actor.

What Information Was Affected?

The Texas Attorney General lists Social Security numbers, driver's-license numbers, government-issued identification, financial information, medical information, and health-insurance information. The scope can differ by person, so notice recipients should rely on the fields stated in their own letters.

How Many People Were Affected?

The current Texas record reports 20,106 affected people across the United States, including 4,098 Texas residents. The older HHS portal entry shows 500 people. The later Texas filing is used for the current, more comprehensive nationwide total; the two figures are not added together.

What Should Affected People Do?

People whose Social Security or identity-document information was affected can review their credit reports, consider a free credit freeze or fraud alert, and report unfamiliar account applications to the relevant institution.

Health-insurance statements, patient accounts, and financial transactions should be checked for unfamiliar activity or claims. Do not share passwords, identity details, or one-time codes in unexpected communications using the name of McEwen, a healthcare provider, or an insurer.