State records show General Land Office notified the Texas Attorney General of a data breach on September 22, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The Texas Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official Texas AG notice for General Land Office identifies the following exposed data:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
The Texas General Land Office (GLO) serves as a vital state agency responsible for managing public lands, maintaining historic archives, administering the Alamo, and overseeing long-term disaster recovery and coastal protection programs. Because of its expansive mandate, the GLO interacts directly with millions of Texas citizens, property owners, and disaster relief applicants. In the course of executing these public services, the agency collects and preserves an immense volume of sensitive, personally identifiable information, ranging from historical deeds and public land grants to complex disaster recovery applications that include financial assessments, housing records, and private citizen data.
In 2025, the General Land Office reported a significant security incident to the Office of the Texas Attorney General. State agencies and government contractors of this scale are frequent targets for sophisticated cybercriminals, ransomware syndicates, and advanced persistent threat actors. A breach of this magnitude typically involves unauthorized infiltration into legacy document management systems, centralized databases, or third-party vendor networks utilized for processing state grants and public records. These incidents often expose the vulnerabilities inherent in maintaining vast repositories of digital archives and government infrastructure without adequate multi-layered security controls or real-time intrusion monitoring.
The exposure of sensitive records through a state agency data breach carries profound risks for affected individuals. The compromised data categories frequently include full legal names, Social Security numbers, dates of birth, detailed property ownership histories, banking details associated with disaster relief or land transactions, and government-issued identification numbers. When this information falls into the hands of malicious actors, victims face an elevated, long-term threat of identity theft, fraudulent loan applications, synthetic credit creation, and targeted phishing schemes. Because government records often tie an individual's identity directly to physical property and financial assets, the breach of GLO data exposes citizens to severe financial and administrative disruption.
As a public agency holding confidential citizen data, the General Land Office is bound by strict statutory duties under Texas data privacy and security laws, as well as overarching state administrative standards. These legal frameworks require government entities to implement robust administrative, physical, and technical safeguards to protect confidential personal information from unauthorized access, exfiltration, or disclosure. The occurrence of a reportable data breach strongly indicates a failure in these mandatory security protocols, whether through unpatched vulnerabilities, inadequate encryption standards, or insufficient access controls. Under the law, organizations that collect and retain sensitive personal information are legally accountable for failing to maintain reasonable security measures.
Receiving a formal data breach notification letter from the General Land Office serves as a critical legal acknowledgment that your private information was compromised due to the agency's security failures. Under Texas law, this notification establishes the legal standing required to participate in a class action lawsuit aimed at securing accountability, compensation, and mandatory security upgrades. Affected individuals do not need to prove that they have already suffered actual financial fraud or out-of-pocket loss to pursue legal remedies; the increased risk of future identity theft is legally actionable. Our firm handles these complex data privacy cases on a strict contingency fee basis, meaning you pay nothing out of pocket and we only recover fees if we successfully secure a recovery on your behalf.
Notification Delay: Approximately 2 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from General Land Office
You were a customer, patient, employee, or client of General Land Office
Your personal information was stored in General Land Office's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Your General Land Office notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Time limits can forfeit your claim. Have attorneys review your General Land Office case at no cost — contingency means zero upfront fees.
Security Incident
2025-07-18
An unauthorized party accessed General Land Office systems that stored personal information.
Reported to Attorney General
September 22, 2025
The Texas AG received General Land Office's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Compensation in a case like General Land Office's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Credit-monitoring subscriptions and protection plans you bought because of the breach are recoverable expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
Other companies have notified the Texas AG of breaches. Received one of these letters as well? You may have more than one claim.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris