On January 30, 2026, Central Texas MHMR Center dba Center for Life Resources filed an official data breach notice with the Texas Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Texas Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Texas Attorney General filing, the Central Texas MHMR Center dba Center for Life Resources incident compromised these categories of personal information:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Central Texas MHMR Center, operating as Center for Life Resources, serves as a vital community health and mental health services provider within Texas. Offering comprehensive behavioral healthcare, intellectual and developmental disability services, and community support programs, the organization acts as a repository for some of the most sensitive personal information imaginable. Because of its mission to provide accessible mental health care and support, Center for Life Resources routinely collects, processes, and stores vast amounts of confidential data for vulnerable populations, including detailed medical histories, clinical notes, psychological evaluations, and billing records required for public and private health insurance administration.
In 2026, Central Texas MHMR Center dba Center for Life Resources reported a significant data security incident to the Texas Attorney General. While the full mechanics of the intrusion continue to be evaluated through ongoing forensic investigations, incidents affecting healthcare providers and mental health centers typically involve unauthorized third-party access to internal database environments, compromised network credentials, or sophisticated ransomware attacks deployed against legacy infrastructure. Given the high-value nature of the information maintained by behavioral health providers, cybercriminals frequently target these networks to exfiltrate bulk files containing unencrypted patient directories and administrative databases.
Based on the typical profile of data compromised in behavioral healthcare breaches, the exposed records likely include full legal names, dates of birth, Social Security numbers, home addresses, health insurance policy details, and deeply private clinical, diagnostic, and treatment information. The exposure of this specific data combination creates profound, multi-layered risks for affected individuals. Unlike standard consumer data such as credit card numbers, which can be easily replaced, medical and mental health data cannot be changed. Compromise of this information exposes victims to severe medical identity theft, where unauthorized actors fraudulently bill insurance providers or obtain prescription drugs under a victim's name, as well as targeted phishing schemes that exploit the stigma and sensitivity associated with mental health treatment.
As a covered entity handling protected health information, Central Texas MHMR Center dba Center for Life Resources was legally bound by the Health Insurance Portability and Accountability Act (HIPAA), the Texas Medical Records Privacy Act, and state common law standards of care to implement rigorous administrative, physical, and technical safeguards. These regulations require continuous network monitoring, strict access controls, robust encryption protocols, and regular vulnerability assessments. The occurrence of a successful breach strongly indicates a potential failure to maintain these federally mandated cybersecurity standards, leaving patient files vulnerable to external exploitation.
Receiving a data breach notification letter from Central Texas MHMR Center dba Center for Life Resources serves as formal legal acknowledgment that your confidential information was compromised due to inadequate security practices. Under modern data privacy litigation frameworks, the receipt of such a notice establishes legal standing to participate in a class action lawsuit aimed at holding the organization accountable for failing to protect sensitive records. Affected individuals do not need to prove that they have already suffered direct financial loss or medical fraud to seek legal recourse; the increased risk of future identity theft and the invasion of privacy are sufficient grounds for action. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Notification Delay: Approximately 3 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Central Texas MHMR Center dba Center for Life Resources
You were a customer, patient, employee, or client of Central Texas MHMR Center dba Center for Life Resources
Your personal information was stored in Central Texas MHMR Center dba Center for Life Resources's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Do not discard the Central Texas MHMR Center dba Center for Life Resources letter. It documents your standing as an affected individual — the foundation of any claim you file.
Central Texas MHMR Center dba Center for Life Resources typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Claims windows close. Our team reviews Central Texas MHMR Center dba Center for Life Resources breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
2025-11-14
Someone gained unauthorized access to data held in Central Texas MHMR Center dba Center for Life Resources's systems.
Reported to Attorney General
January 30, 2026
Central Texas MHMR Center dba Center for Life Resources's disclosure was logged with the Texas Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Several forms of recovery may be available to Central Texas MHMR Center dba Center for Life Resources letter recipients — the exact mix depends on state law and the data types exposed:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Credit-monitoring subscriptions and protection plans you bought because of the breach are recoverable expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
The companies below also filed breach notices with the Texas Attorney General. Letter recipients for any of them can pursue a review.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris