Encore Enterprises Data Breach

Encore Enterprises Data Breach Affects 4,488 People With SSNs and Health Insurance Information: What Affected Individuals Need to Know

Encore Enterprises reported a data breach affecting 4,488 people. The information reported to Texas regulators includes Social Security numbers and health insurance information.

Encore Enterprises, Inc. is a Dallas holding company. Its interests include apartments, retail, hotels, emergency rooms, dental practices and restaurants. On October 14, 2026, Encore dated letters to people whose information may have been involved. It reported the incident to the Texas Attorney General and to Massachusetts consumer regulators.

What Happened at Encore Enterprises

According to the Texas Attorney General report, an unauthorized party had access from July 19, 2026 to August 1, 2026. That is about two weeks. Encore discovered the incident on September 18, 2026, about seven weeks after the access ended. Letters followed on October 14, 2026, which was 26 days after discovery.

The Texas report lists 4,488 people affected, including 1,746 Texans. The Texas report number is BR-0005426. The Massachusetts filing is number 2026-1788.

Encore’s letter says little about the attack itself. It refers to “a recent incident” and does not describe how the party got in, which systems were reached, or who was responsible. Encore says it is reviewing its policies and procedures.

Why Many Recipients May Not Recognize the Name Encore

Most people know the businesses Encore owns, not the holding company. A tenant, a hotel guest, a worker or a patient might open this letter and not know why Encore has their data.

The letter does not say which Encore business the information came from. It also does not say whether the people affected are employees, tenants, patients or customers. Anyone who gets this letter should not assume it is junk mail. The return address reads Encore Enterprises, c/o Cyberscout, in Suwanee, Georgia.

What Information Was Exposed?

According to the Texas Attorney General report, the information involved includes:

• Names
• Addresses
• Social Security numbers
• Health insurance information

The sample letter filed in Massachusetts does not list these details. It says the information “may include your name, together with” a placeholder. Each person’s letter should show which of their details were involved.

What Is Encore Offering Affected Individuals?

The sample letter offers single-bureau credit monitoring, a credit report and a credit score at no charge. Cyberscout, a TransUnion company, provides the services. The letter describes alerts for 24 months from enrollment. People must enroll within 90 days of the date on their letter, using the code in that letter at bfs.cyberscout.com/activate. For a letter dated October 14, 2026, that deadline falls around January 12, 2027. The letter says enrollment may not be available to minors under 18.

Encore’s assistance line is +1 855-474-9656, Monday through Friday, 8:00 a.m. to 8:00 p.m. EST, excluding holidays.

Your Information Is at Risk

A Social Security number does not expire, and most people keep theirs for life. Combined with a name and home address, it can support new credit accounts and tax refund fraud. Health insurance information adds another risk. Criminals may use it to bill for care or obtain services in someone else’s name. Credit monitoring may flag new accounts, but it does not always catch medical identity theft.

Affected individuals should:

• Enroll in the offered monitoring before the deadline
• Place a free fraud alert or credit freeze
• Review credit reports at annualcreditreport.com
• Check insurance statements for care they did not receive
• Watch for calls or emails that mention the incident

Do You Have Legal Options?

Companies that collect Social Security numbers and health insurance information have a legal obligation to safeguard them. When that obligation is not met, affected individuals may have legal rights and remedies. Emery | Reddy is investigating this breach. No Fee Unless We Recover.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

FAQ

How many people were affected by the Encore Enterprises breach?

The Texas Attorney General report lists 4,488 people, including 1,746 Texans.

What information was exposed?

The Texas report lists:

• Names
• Addresses
• Social Security numbers
• Health insurance information

Why did I get a letter from a company I don’t know?

Encore is a holding company with many businesses. The letter does not say which one held your data. You can ask the assistance line at +1 855-474-9656.

Why did the letters take until October?

The access ended August 1. Encore says it discovered the incident September 18 and dated its letters October 14. Encore has not explained the gap between August 1 and September 18.

Has a lawsuit been filed?

Yes. Finnerty v. Encore Enterprises, Inc., No. 3:26-cv-03848, was filed November 2, 2026 in the U.S. District Court for the Northern District of Texas. A filed case is not a finding that Encore did anything wrong.

How can a health data breach hurt me?

Someone could use your insurance details to get care or file false claims in your name. That can leave errors in your medical records and unexpected bills. Read every statement from your insurer.

Do I have a legal claim?

You may. Companies have a duty to protect your personal information and to tell you when it is exposed. If you received a letter from Encore Enterprises, you may have rights. Contact Emery | Reddy at 916.995.5968 or visit www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.