The Texas Attorney General's office lists a data breach report from Amtech Software, Inc. on behalf of certain customers, filed January 13, 2026. Companies in this situation send legally required notification letters to affected individuals — if you found Amtech Software, Inc. on behalf of certain customers's letter in your mail, this page explains what it means and what you can do.
The Texas Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Texas Attorney General filing, the Amtech Software, Inc. on behalf of certain customers incident compromised these categories of personal information:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Amtech Software, Inc. operates as a specialized enterprise technology and software solutions provider, developing industry-specific management systems utilized by a wide array of commercial clients, including manufacturing, distribution, and corporate supply chain enterprises. Because Amtech provides integrated operational infrastructure, enterprise resource planning, and data management platforms, the company and its hosted environments often process and store vast repositories of confidential corporate records, proprietary business information, and sensitive personnel data. This extensive data ecosystem typically encompasses the deeply personal and financial details of employees, contractors, and customers whose information is managed through client portals, administrative dashboards, and interconnected software modules hosted or supported by the platform.
In 2026, Amtech Software, Inc. reported a significant cybersecurity incident to the Texas Attorney General's office, stemming from unauthorized access to its network and software infrastructure on behalf of certain affected customers. In the context of enterprise software and technology vendors, breaches of this nature frequently involve sophisticated cyberattacks, such as unauthorized intrusions into centralized databases, deployment of ransomware, or compromises of third-party hosting environments and cloud-based applications. When an enterprise software provider experiences a security lapse, malicious actors can exploit vulnerabilities in application logic or administrative credentials to gain lateral access to internal networks, potentially exfiltrating voluminous archives containing confidential client and employee records before detection.
The exposure resulting from this incident implicates multiple categories of highly sensitive personal information, creating substantial risks of identity theft, financial fraud, and targeted cybercrime for affected individuals. Compromised data sets typically include full names, dates of birth, Social Security numbers, banking and direct deposit details, and administrative credentials. The unauthorized disclosure of Social Security numbers and financial account information exposes victims to severe, long-term threats of identity theft, fraudulent credit applications, and unauthorized banking transactions. Furthermore, the combination of personal identifiers and corporate data leaves victims vulnerable to sophisticated phishing schemes, tax fraud, and corporate impersonation attacks designed to inflict severe financial harm.
As a technology provider handling sensitive corporate and personal data, Amtech Software, Inc. and its client operations are bound by strict legal duties under state and federal data protection frameworks, including the Texas Identity Theft Enforcement and Protection Act and applicable provisions of the Federal Trade Commission Act. These legal standards require entities that collect, process, or maintain sensitive personal information to implement and maintain robust, commercially reasonable administrative, technical, and physical safeguards to prevent unauthorized access. The occurrence of a data breach of this scale strongly indicates a failure to maintain adequate security controls, such as failing to implement multi-factor authentication, inadequate network segmentation, or delayed patch management, which directly constitutes a breach of the legal duty of care owed to affected individuals.
Receiving a formal data breach notification letter from Amtech Software, Inc. or its client representatives serves as an official legal acknowledgment that your personal information was compromised due to inadequate data security practices. Under modern jurisprudence, the receipt of such a notification establishes legal standing to pursue class action litigation, allowing affected individuals to seek accountability, restitution, and mandatory improvements to corporate cybersecurity protocols without requiring proof of immediate financial loss. Our law firm is actively investigating this 2026 security incident on behalf of affected individuals. We handle these complex data privacy cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and our firm only collects a fee if we successfully recover compensation on your behalf.
Notification Delay: Approximately 10 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Amtech Software, Inc. on behalf of certain customers
You were a customer, patient, employee, or client of Amtech Software, Inc. on behalf of certain customers
Your personal information was stored in Amtech Software, Inc. on behalf of certain customers's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Your Amtech Software, Inc. on behalf of certain customers notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Look for the credit-monitoring offer section of your Amtech Software, Inc. on behalf of certain customers letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Deadlines apply to breach claims. A free review of your Amtech Software, Inc. on behalf of certain customers letter takes minutes, and we only get paid if you do.
Security Incident
2025-03-11
Amtech Software, Inc. on behalf of certain customers's systems were compromised, exposing stored personal records.
Reported to Attorney General
January 13, 2026
The Texas AG received Amtech Software, Inc. on behalf of certain customers's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Breach victims may recover several categories of loss. What applies in the Amtech Software, Inc. on behalf of certain customers matter depends on your state, the data involved, and the company's conduct.
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Costs of credit monitoring, identity protection services, and restoration help may all be claimed.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
The companies below also filed breach notices with the Texas Attorney General. Letter recipients for any of them can pursue a review.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris