Costa Solutions, LLC, a managed-labor and warehousing company based in San Antonio, Texas, discovered unusual network activity on April 17, 2026. An investigation determined that personal information was present within the affected data, though no evidence of misuse was found. The company reported the incident to the FBI and published a "Notice of Data Security Incident" on September 9, 2026.
The breach exposed names, Social Security numbers, driver’s license numbers, government-issued identification numbers, dates of birth, medical information, health insurance information, and financial information. The incident potentially affected nearly 20,000 individuals, according to a report to the Texas Attorney General. Identity theft protection was offered to affected individuals. The precise extent of affected individuals and specific states beyond Texas have not been publicly detailed.
Additional details about this incident may emerge over time. Notification letters to potentially impacted individuals were planned to be sent following a review of files.