Denton County MHMR Center, My Health, My Resources disclosed a data security incident to the Texas Attorney General on January 5, 2026, triggering legally mandated notification letters. If you are one of the people who received Denton County MHMR Center, My Health, My Resources's letter, your data may have been exposed and you could be entitled to compensation.
The Texas Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
Denton County MHMR Center, My Health, My Resources's filing with the Texas Attorney General lists these compromised data types:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Denton County MHMR Center, operating as My Health, My Resources, functions as a vital community mental health and intellectual and developmental disability services provider in Texas. The organization delivers comprehensive behavioral health care, crisis intervention, psychiatric services, and specialized support programs to vulnerable populations across the region. Because of the critical nature of its mission, Denton County MHMR Center collects and maintains vast repositories of deeply sensitive information. This includes comprehensive medical histories, psychological evaluations, diagnostic records, treatment notes, insurance details, and government-issued identification numbers for thousands of patients, clients, and staff members.
In 2026, Denton County MHMR Center reported a major security incident to the Texas Attorney General, indicating that unauthorized actors compromised its network infrastructure or digital environment. Healthcare providers and behavioral health centers are prime targets for cybercriminals due to the immense value of Protected Health Information (PHI) and Personally Identifiable Information (PII) on the dark web. Security incidents involving healthcare entities typically stem from sophisticated ransomware attacks, unauthorized access to electronic health record (EHR) databases, or vulnerabilities introduced through third-party vendors and business associates who handle administrative and billing functions.
The data compromised in this breach extends far beyond standard consumer credentials, exposing highly sensitive records that can severely jeopardize victims' privacy and financial security. The exposure of names, dates of birth, Social Security numbers, and home addresses creates immediate risks of identity theft and tax fraud. Furthermore, the compromise of medical record numbers, health insurance details, diagnostic data, and treatment history exposes victims to targeted medical fraud, fraudulent insurance claims, and potential exploitation of their private health struggles. Unlike standard retail breaches where credit cards can be canceled, immutable health and identity data leaves victims vulnerable to lifelong security threats.
As a covered entity handling protected health information, Denton County MHMR Center was bound by strict regulatory standards under the Health Insurance Portability and Accountability Act (HIPAA), the Texas Medical Records Privacy Act, and state data breach notification laws. These frameworks mandate rigorous administrative, physical, and technical safeguards—including robust encryption, multi-factor authentication, regular vulnerability assessments, and strict access controls—to prevent unauthorized disclosures. The occurrence of a successful breach strongly indicates a failure to maintain adequate cybersecurity postures, potentially violating statutory duties to protect sensitive patient data from foreseeable threats.
Receiving a data breach notification letter from Denton County MHMR Center is an official acknowledgement that your confidential information was compromised due to inadequate security measures. Under established legal principles, the receipt of this letter confers legal standing to participate in a class action lawsuit aimed at holding the organization accountable for failing to safeguard your privacy. Individuals whose data was exposed are not required to demonstrate actual financial loss or identity theft to seek legal recourse; the increased risk of future harm and the forced expenditure of time and money on credit monitoring are sufficient. Our firm investigates these matters on a contingency fee basis, meaning you pay nothing out of pocket unless we successfully recover compensation on your behalf.
Notification Delay: Approximately over 1 year elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from Denton County MHMR Center, My Health, My Resources
You were a customer, patient, employee, or client of Denton County MHMR Center, My Health, My Resources
Your personal information was stored in Denton County MHMR Center, My Health, My Resources's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the Denton County MHMR Center, My Health, My Resources letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Check your Denton County MHMR Center, My Health, My Resources letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Time limits can forfeit your claim. Have attorneys review your Denton County MHMR Center, My Health, My Resources case at no cost — contingency means zero upfront fees.
Security Incident
2024-12-23
An unauthorized party accessed Denton County MHMR Center, My Health, My Resources systems that stored personal information.
Reported to Attorney General
January 5, 2026
The Texas AG received Denton County MHMR Center, My Health, My Resources's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Compensation in a case like Denton County MHMR Center, My Health, My Resources's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Credit-monitoring subscriptions and protection plans you bought because of the breach are recoverable expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
Other companies have notified the Texas AG of breaches. Received one of these letters as well? You may have more than one claim.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris