Data Breach WatchDBW

Government

Low

monitoring

Updated about 1 month ago

City of Houston Data Breach

▼ Key takeaways

•Reports suggest a potential breach involving City of Houston.
•Discovered on July 26, 2026.
•Possible data exposed: PII, resident contact details, service requests, complaint descriptions, addresses, location data, case/ticket metadata, department routing, service status, CRM metadata.
•Affects individuals in: Texas.
•Confirmation level: Based on reports.

Detailed summary

On July 26, 2026, the ExfilSquad ransomware group posted the City of Houston on its leak site, claiming a data breach. The group stated that approximately 6 million records were exfiltrated from the city's systems.

The reported exposed data includes significant PII, resident contact details, addresses, location data, service requests, complaint descriptions, case/ticket metadata, department routing information, service status, resolution details, and CRM metadata. The available information does not specify the number of unique individuals affected, only the record count. There is no public confirmation at this time regarding the exposure of SSNs, medical records, or financial account data.

Details surrounding the breach, such as official notification dates for regulators or consumers, remain unconfirmed by the City of Houston. Further information may emerge as the situation develops.

Data possibly involved

PII
resident contact details
service requests
complaint descriptions
addresses
Could be combined with other data for identity theft
location data
case/ticket metadata
department routing
service status
CRM metadata

Company Response Timeline

Breach Occurred

Jul 26, 2026

Company Discovered

Unknown

Regulator Notified

Unknown

Consumers Notified

Unknown

Breach Verification Status

Reports Only

Current

Initial dark web reports of potential breach

Company Confirmed

Company has acknowledged the breach

Regulator Confirmed

Confirmed by regulatory authorities

Note: Breach verification can take time. Information may evolve as more details become available from companies and regulators.

Case Status:

Monitoring

We're monitoring this situation for developments.

Were You Affected By This Breach?

If you are a customer or have received a data breach notification, you may submit your information as part of our ongoing investigation. Submitting your information is free and does not obligate you.

Were you in the City of Houston breach? Check your email

Free scan against known breach datasets. Then remove your info from data-broker sites with Data Shield.

No signup required. 30-second scan. Your email is only stored if you opt into alerts.

Get your info off data-broker sites

Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

See how Data Shield works

Check Your Risk Level

Answer a few questions to understand how this breach might affect you

Do you use City of Houston?

Yes

What state are you in?

What should I do?

Change your passwords

Update passwords for the affected service and any accounts using the same password

Enable two-factor authentication

Add an extra layer of security to your accounts

Monitor your accounts

Watch for suspicious activity on your financial and online accounts

Watch for phishing attempts

Be cautious of emails or messages claiming to be from the affected company

Consider a credit freeze

Prevent unauthorized access to your credit report

Scan your email for other exposures

Check whether this address shows up in other known breaches. Free, no account.

Get your info off data-broker sites

Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

See how Data Shield works