Texas Tech Health Sciences Center data breach: why new letters went out in April 2026

Why did I get a Texas Tech breach letter in 2026?

The April 2026 letter describes the same September 2024 event as the first round, and California files it as a supplemental notice. It does not say why these people were written to 15 months after the first letters. It gives January 24, 2025 as the date the review found each reader's information.

Date	What the letter and the regulators' records say
September 17 to 29, 2024	Files and folders accessed or removed
September 2024	Disruption to some computer systems and applications identified
November 25, 2024	Two reports submitted to HHS: the Health Sciences Center (650,000) and the El Paso center (815,000)
January 24, 2025	Review finds whose information was present; first notices recorded by California for both centers
April 9, 2026	Supplemental letter date; recorded by Washington (511 residents)
April 24, 2026	Supplemental notice recorded by California
April 27, 2026	Posted on the Texas attorney general's list: 738,506 Texans
July 9, 2026	Enrollment deadline in the April letters

Both HHS reports are still on the list of open cases. Together they count 1,465,000 people.

What information was involved?

The letter lists name, date of birth, address, Social Security number, driver's license number, other government ID number, financial account information, health insurance information and medical information. The medical information includes medical record numbers, billing and claims data, and diagnosis and treatment information. Texas and Washington record similar categories. The center says it is not aware of any actual or attempted identity theft or fraud tied to the event.

Group	Items in the letter
Identity	Name, date of birth, address, Social Security number, driver's license number, government-issued ID number
Money	Financial account information, billing and claims data
Health	Health insurance information, medical record numbers, diagnosis and treatment information

How many people were affected?

Regulator	What it counts	Number
HHS Office for Civil Rights	Texas Tech University Health Sciences Center (Nov 2024 report)	650,000
HHS Office for Civil Rights	Texas Tech University Health Sciences Center El Paso (Nov 2024 report)	815,000
Texas attorney general	Texans (April 2026 report)	738,506
Washington attorney general	Washingtonians (April 2026 notice)	511
Indiana attorney general	Texas Tech University Health Sciences Center, total (Jan 2025 notice)	533,874
Indiana attorney general	Texas Tech University Health Sciences Center El Paso, total (Jan 2025 notice)	868,133

The Texas figure is the ninth largest on the Texas attorney general's 2026 list. It may cover people already written to in 2025; the documents do not say whether it counts only the April round.

The first round of letters is also on Indiana's 2025 report, as two rows with a notice date of January 24, 2025 and a breach date of September 17, 2024. The main campus reported 533,874 people in total, 252 of them in Indiana, and El Paso reported 868,133, 752 of them in Indiana. Together the two Indiana totals come to 1,402,007, which is 62,993 fewer than the 1,465,000 in the two HHS reports. The documents do not explain the gap. In the largest data breaches of 2025, ranked on Indiana's totals, the El Paso row is 16th and the main campus row 23rd.

What is Texas Tech offering?

Credit monitoring and identity restoration through IDX for 12 or 24 months, depending on the letter. People must enroll themselves.

Item	Detail from the letter
Provider	IDX
Length	12 or 24 months, printed on each letter
Enrollment	app.idx.us/account-creation/protect, with the code at the top of the letter
Deadline	July 9, 2026
Phone	1-866-902-1996, Monday to Friday, 8 a.m. to 8 p.m. Central Time, excluding major U.S. holidays

The April deadline has passed. The letter notes that federal law bars the bureaus from charging to place or lift a credit freeze, which needs no enrollment. The guide to monitoring offers compares deadlines across letters.

What the documents leave open

• Why a second round of letters went out in April 2026, and to how many people.
• How the attacker got in, and what caused the disruption.
• Whether the 738,506 Texans include people notified in 2025.

The guide to school and education breach notices and the healthcare provider guide compare other letters like this one.