Resource Center of Dallas

Summary

Resource Center of Dallas notified approximately 12,500 individuals after discovering that an unauthorized party accessed parts of its network and obtained files containing personal and protected health information. The compromised data included names, dates of birth, medical and health insurance details, financial account information, and for some individuals Social Security numbers. The organization engaged third‑party cybersecurity experts to investigate the incident, completed a data review, and subsequently reviewed and strengthened its privacy and security protocols.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On February 4, 2026, suspicious network activity was detected within the computer systems of Resource Center of Dallas, prompting the engagement of third‑party cybersecurity professionals to investigate. The investigation determined that an unauthorized third party had accessed certain systems between February 4 and February 12, 2026, and had accessed or removed files containing personal and/or protected health information. A comprehensive data review was completed on or around July 2, 2026, which confirmed that the compromised data included names, dates of birth, medical information, health insurance information, financial account information, and other identification details, with Social Security numbers exposed for some individuals. The organization reported that the breach affected 12,490 individuals whose information was stored on the impacted systems.

Resource Center of Dallas notified the 12,490 affected individuals about the incident, describing the categories of data that had been accessed and emphasizing that it takes the security of personal and health information very seriously. The entity noted that it had previously implemented many precautions to safeguard such data and continually evaluates and modifies its practices to enhance privacy and security. Following the incident, the organization reviewed its privacy and security protocols and practices, and it implemented additional safeguards aimed at reducing the risk of similar occurrences in the future. These steps were taken as part of its response to the confirmed unauthorized access and data exposure.

The organization’s statement reflects its ongoing commitment to monitoring and improving its security posture, consistent with its pre‑existing practice of continual evaluation and modification of safeguards. No further details about the threat actor’s identity, motives, or any potential misuse of the exposed data were disclosed in the source material. The narrative of the incident is limited to the confirmed timeline, the types of information involved, the notification of affected individuals, and the subsequent internal review and enhancement of security measures.

Sources

Sources available to members: 1 source.