Delek US Energy Data Breach

Delek US Energy told Texas regulators that a security breach exposed the Social Security numbers and driver’s license numbers of 1,666 Texans. The company has not said how the breach happened or how many people were affected in total.

Delek US Energy, Inc. is a subsidiary of Delek US Holdings, Inc. (NYSE: DK), a petroleum refining, logistics and asphalt company based in Brentwood, Tennessee. On October 16, 2026, the Texas Attorney General published Delek US Energy’s data breach report. The report says Delek notified affected people by U.S. Mail.

What Delek Reported to Texas

According to the Texas Attorney General’s data breach reports, the information involved includes names, Social Security numbers and driver’s license numbers. The report lists 1,666 affected Texans.

The Texas report does not say when the breach happened, when Delek discovered it, or how it happened. As of October 19, 2026, no public notice letter or company statement about the incident could be found.

Delek has not disclosed the total number of people affected. Texas counts only its own residents, so 1,666 is a floor, not a total. People in other states may also be affected.

A Ransomware Group Claimed Delek US in August

Ransomware is malicious software that criminals use to lock or steal data and then demand payment. On August 19, 2026, Ransomware.live, a site that tracks ransomware gang leak sites, recorded a listing of “Delek US” by a group called Helix.

Delek has not confirmed a ransomware attack. It has also not said whether the Helix claim and the Texas report involve the same incident. If they do, the Texas filing came about two months after the claim appeared.

Sources: Texas Attorney General Data Security Breach Reports (published October 16, 2026); Ransomware.live victim listing (August 19, 2026).

Why a Social Security Number and Driver’s License Number Together Are Dangerous

A Social Security number by itself is valuable to criminals. Paired with a name and a driver’s license number, it becomes much more useful. Together, these details can help a thief pass identity checks, open new credit, file a fake tax return or create a fake ID.

Unlike a credit card, a Social Security number cannot easily be changed. That means the risk can last for years.

What Information Was Exposed?

Based on Delek US Energy’s report to the Texas Attorney General, the information involved includes:

• Names
• Social Security numbers
• Driver’s license numbers

What Is Delek Offering Affected Individuals?

Delek has not publicly disclosed whether it is offering credit monitoring or identity protection. Anyone who received a letter should check it for an offer, an enrollment code and a deadline.

Your Information Is at Risk

Exposed Social Security and driver’s license numbers create a real risk of identity theft. Misuse can show up months or years later, so steady monitoring matters.

Affected individuals can take these steps:

• Enroll in any monitoring offered in the letter before its deadline.
• Pull free credit reports at www.annualcreditreport.com and look for accounts that are not yours.
• Place a free credit freeze with Equifax, Experian and TransUnion.
• Watch bank statements and IRS mail for signs of a fake tax return.
• Contact the state driver’s license office if a driver’s license number appears to be misused.

Do You Have Legal Options?

Companies that collect Social Security numbers and driver’s license numbers have a legal obligation to protect them. When that obligation is not met, affected individuals may have legal rights and remedies. A Free Case Review can help them understand their options.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that collect and store this information are expected to safeguard it. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Frequently Asked Questions

How many people were affected by the Delek US Energy data breach?

Delek has not disclosed a total. Its report to the Texas Attorney General lists 1,666 Texans. People in other states may also be affected.

What information was exposed?

According to the Texas report:

• Names
• Social Security numbers
• Driver’s license numbers

When did the breach happen?

Delek has not said. The Texas Attorney General published the report on October 16, 2026. A ransomware group called Helix listed “Delek US” on its leak site on August 19, 2026, but Delek has not confirmed that the two are connected.

Is Delek offering credit monitoring?

Delek has not said so publicly. Check your letter for any offer, enrollment code and deadline.

What should I do if I received a letter?

• Freeze your credit with all three credit bureaus. It is free.
• Check your credit reports at www.annualcreditreport.com.
• Enroll in any monitoring the letter offers.
• Keep your letter in a safe place.
• Request a Free Case Review from Emery | Reddy.

How can I avoid scams that mention this breach?

Criminals often use news of a breach to send fake messages. Do not click links or share personal details with anyone who contacts you about the Delek breach. Use only the contact information printed in your official letter.

Do I have a legal claim?

Companies that hold your Social Security number and driver’s license number have a duty to protect them and to tell you promptly when they may have been exposed. If you received a letter from Delek US Energy, you may have legal rights. Contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.