Vernon & Waldrep OB-Gyn Data Breach

Vernon & Waldrep OB-Gyn Associates, a Dallas women’s health practice, has confirmed a data breach affecting 16,876 patients. The exposed records include medical information from a practice that provides obstetric and gynecological care — among the most personal categories of health information there is.

Vernon & Waldrep OB-Gyn Associates, a Dallas-based women’s health practice established in 1983, reported a data breach to the Texas Attorney General on September 11, 2026, confirming 16,876 affected Texas residents. As a single-site practice, this Texas figure represents effectively the entire scope of the breach.

Source: Texas Attorney General Data Security Breach Report, filing published 09/11/2026 (16,876 Texas residents).

A Ransomware Group’s Claim

A group calling itself Global Secret Group claimed responsibility for a cyberattack on Vernon & Waldrep on August 1, 2026, roughly six weeks before the practice’s Texas filing. Vernon & Waldrep has not confirmed this group’s identity in its own regulatory filing, and Emery | Reddy is presenting the claim as unverified — the confirmed fact is the Texas AG filing itself, not the attacker’s account of who was responsible.

What Information Was Exposed?

According to Vernon & Waldrep’s own filing with the Texas Attorney General, the exposed information includes:

• Full name
• Address
• Medical information
• Health insurance information
• Date of birth

Notably, the filing does not list Social Security numbers or financial account information — the risk here isn’t the standard identity-theft exposure. It’s the sensitivity of the medical record itself.

Why an OB-GYN Practice’s Records Are Especially Sensitive

A practice like Vernon & Waldrep holds obstetric and gynecological treatment records — information that can include pregnancy history, pregnancy loss, fertility treatment, contraception, and other deeply personal reproductive health details. Since the Supreme Court’s 2022 Dobbs decision reshaped the legal landscape around reproductive health information, the risk of exposure for this category of medical record carries a weight that goes well beyond the usual concerns about identity theft. Patients whose reproductive health information was exposed have a real and distinct privacy interest at stake.

Do You Have Legal Options?

Healthcare providers that collect and store sensitive medical records have a legal duty to secure that information and to notify patients without unreasonable delay.

If you’re a current or former patient of Vernon & Waldrep OB-Gyn Associates, contact Emery | Reddy today for a Free Case Review.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

FAQ

Who is affected by the Vernon & Waldrep data breach?

Vernon & Waldrep confirmed 16,876 affected Texas residents in its filing with the Texas Attorney General. As a single-site Dallas practice, this figure represents essentially the full scope of the breach.

What information was exposed?

According to the practice’s own Texas filing, the exposed data includes names, addresses, medical information, health insurance information, and dates of birth. Social Security numbers and financial data are not listed as exposed.

Has a hacking group claimed responsibility?

A group calling itself Global Secret Group claimed responsibility for an attack on Vernon & Waldrep on August 1, 2026. The practice has not confirmed this claim in its own regulatory filing.

Why does it matter that this is an OB-GYN practice?

OB-GYN records can include some of the most sensitive medical information that exists — pregnancy history, fertility treatment, and reproductive health details. Exposure of that kind of record carries privacy risks well beyond typical identity theft concerns.

Do I have a legal claim?

Healthcare providers that collect and store sensitive medical records have a legal duty to secure that information and to notify patients without unreasonable delay. If you’re a current or former patient of Vernon & Waldrep OB-Gyn Associates, contact the Data Breach Attorneys at Emery | Reddy at 916.995.5968 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.