INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Texas Hospice Management Company Exposes 35,000 Texas Residents' Data

| 2026-10-02 10:00 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
On July 18, 2026, an unauthorized individual potentially accessed and/or acquired files containing patient information at AngMar Management Services, a Mansfield, Texas-based home health and hospice management company. The incident was identified on July 20, 2026, and the forensic investigation determined that the data compromised included names, addresses, dates of birth, Social Security numbers, patient IDs, medical record numbers, health insurance information, dates of service, diagnosis/condition information, provider names, prescription information, and/or medical history information. The Interlock ransomware group is believed to be behind the attack, which resulted in the exfiltration of 710 GB of data, affecting an estimated 35,916 Texas residents; however, only 35,000 individuals have been publicly disclosed as being affected by the incident. AngMar Management Services has implemented additional security measures and offered complimentary credit monitoring services to those impacted.
Technical Mitigations AI-generated
• Patch Interlock ransomware group's vulnerabilities to prevent similar attacks • Implement multi-factor authentication for employee email accounts and cloud-based work accounts • Regularly review and monitor email account activity, including attachments and links, for suspicious behavior
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope healthhealth
Incident Timeline
‎June 3, 2026
An employee at a Texas hospice management company responded to an email on June 3, 2026.
industry Health
The employee responded to the email on June 3, 2026, and the compromised account was identified by Eskenazi Health on July 27, 2026.
‎July 18, 2026
Threat actors used phishing attacks to gain unauthorized access to the systems of a Texas hospice management company, resulting in the exposure of sensitive data for approximately 35,000 residents.
‎around July 18, 2026
An unauthorized individual potentially accessed and/or acquired files containing patient information on or around July 18, 2026.
‎July 20, 2026
An unauthorized individual potentially accessed and/or acquired files containing patient information on or around July 18, 2026.
‎July 27, 2026
Threat actors gained unauthorized access to a Texas hospice management company's electronic health record system, compromising sensitive patient information.
industry Health
The employee responded to the email on June 3, 2026, and the compromised account was identified by Eskenazi Health on July 27, 2026.
organisation Computer Systems Integrated
Computer Systems Integrated runs the electronic health record system used by the correctional facilities.
organisation the HHS’ Office for Civil Rights
The incident is not yet shown on the HHS’ Office for Civil Rights breach portal, and the number of affected individuals has yet to be publicly disclosed.
‎August 2026
The Interlock ransomware group exfiltrated 710 GB of data, including the personal and protected health information of approximately 35,916 Texas residents.
tactic Ransomware
The incident appears to have been a ransomware attack by the Interlock ransomware group, which added AngMar Management Services to its dark web data leak site in August 2026.
tactic Data Leak
The incident appears to have been a ransomware attack by the Interlock ransomware group, which added AngMar Management Services to its dark web data leak site in August 2026.
organisation Eskenazi Health Eskenazi Health
Eskenazi Health Eskenazi Health, an Indianapolis, Indiana-based safety net health system, has announced a cybersecurity incident involving unauthorized access to certain patient data.
organisation Eskenazi Health
A threat actor had gained access to the email account of a trusted business contact and used that account to send thousands of emails to contacts in the address book, including to an Eskenazi Health employee.
data_breach 710 GB
The group claims to have exfiltrated 710 GB of data in the incident.
‎September 8, 2026
Threat actors compromised the data of 35,000 Texas residents managed by AngMar Management Services.
industry Health
The review of the affected data was completed on September 8, 2026, when it was confirmed that the data compromised in the incident included names, addresses, dates of birth, Social Security numbers, patient IDs, medical record numbers, health insurance information, dates of service, diagnosis/condition information, provider names, prescription information, and/or medical history information.
organisation Social Security
The review of the affected data was completed on September 8, 2026, when it was confirmed that the data compromised in the incident included names, addresses, dates of birth, Social Security numbers, patient IDs, medical record numbers, health insurance information, dates of service, diagnosis/condition information, provider names, prescription information, and/or medical history information.
organisation Management Services
AngMar Management Services said it has implemented additional security measures to reduce the risk of similar incidents in the future.
‎Oct 2, 2026
AngMar Management Services identified unauthorized access to its information technology systems.
industry Health
Texas Hospice Management Company Data Breach Affects 35,000 Texas Residents Posted By Steve Alder on Oct 2, 2026 AngMar Management Services, a Mansfield, Texas-based home health and hospice management company, has identified unauthorized access to its information technology systems.
industry Technology
Texas Hospice Management Company Data Breach Affects 35,000 Texas Residents Posted By Steve Alder on Oct 2, 2026 AngMar Management Services, a Mansfield, Texas-based home health and hospice management company, has identified unauthorized access to its information technology systems.
tactic Data Breach
Texas Hospice Management Company Data Breach Affects 35,000 Texas Residents Posted By Steve Alder on Oct 2, 2026 AngMar Management Services, a Mansfield, Texas-based home health and hospice management company, has identified unauthorized access to its information technology systems.
organisation Texas Residents Posted
Texas Hospice Management Company Data Breach Affects 35,000 Texas Residents Posted By Steve Alder on Oct 2, 2026 AngMar Management Services, a Mansfield, Texas-based home health and hospice management company, has identified unauthorized access to its information technology systems.
organisation AngMar Management Services
Texas Hospice Management Company Data Breach Affects 35,000 Texas Residents Posted By Steve Alder on Oct 2, 2026 AngMar Management Services, a Mansfield, Texas-based home health and hospice management company, has identified unauthorized access to its information technology systems.
general_metric 35,000 Texas Residents
Texas Hospice Management Company Data Breach Affects 35,000 Texas Residents Posted By Steve Alder on Oct 2, 2026 AngMar Management Services, a Mansfield, Texas-based home health and hospice management company, has identified unauthorized access to its information technology systems.
‎2026/10/02
Threat actors exploited a vulnerability in Computer Systems Integrated's systems to target Suffolk County House of Correction and Nashua Street Jail, affecting inmates at both facilities.
organisation Suffolk County House of Correction
…rection | Nashua Street Jail Inmates at Suffolk County House of Correction and Nashua Street Jail in Boston, Massachusetts, have been affected by a cybersecurity incident at Computer Systems Integrated Inc. Computer Systems Integrated is a technology company affiliated with Correctional Psychiatric Services, a healthcare provider serving inmates at several correctional facilities in the state.
organisation Correctional Psychiatric Services
…rection | Nashua Street Jail Inmates at Suffolk County House of Correction and Nashua Street Jail in Boston, Massachusetts, have been affected by a cybersecurity incident at Computer Systems Integrated Inc. Computer Systems Integrated is a technology company affiliated with Correctional Psychiatric Services, a healthcare provider serving inmates at several correctional facilities in the state.
Tactical Metrics
Metrics
data_breach
710
Gb
The group claims to have exfiltrated 710 GB of data in the incident.
Intelligence Sources
HIPAA Journal 2026-10-02