On December 2, 2025, Theology of the Body Evangelization Team filed an official data breach notice with the Texas Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Texas Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official Texas AG notice for Theology of the Body Evangelization Team identifies the following exposed data:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Theology of the Body Evangelization Team is a non-profit religious and educational ministry dedicated to promoting specific theological frameworks through seminars, courses, publishing, and community outreach. Because of the nature of their operations, organizations like this routinely collect and retain a significant amount of sensitive personal data. They maintain detailed databases containing the personal, financial, and sometimes deeply personal spiritual or counseling-related information of their donors, event attendees, members, and employees. This treasure trove of data makes them an attractive target for cybercriminals seeking to exploit personal identifiers and financial accounts for illicit gain.
In 2025, Theology of the Body Evangelization Team reported a serious data security incident to the Texas Attorney General. While the precise mechanics of the cyberattack continue to be investigated, incidents involving non-profit and religious organizations typically stem from compromised database credentials, sophisticated phishing campaigns targeting administrative staff, vulnerabilities in third-party event registration platforms, or unpatched network infrastructure. These breaches often allow unauthorized actors to dwell within internal systems for extended periods, quietly exfiltrating confidential files before security teams detect the intrusion.
The exposure resulting from this incident compromises multiple categories of highly sensitive information, each carrying distinct risks for victims. Exposed data fields frequently include full names, home addresses, email addresses, phone numbers, dates of birth, and financial details such as credit card numbers or bank account information used for donations and purchases. In religious and educational ministry contexts, breaches may also expose internal donor giving histories, event participation records, and confidential correspondence. When this information falls into the hands of bad actors, victims face an immediate and elevated risk of identity theft, targeted phishing attacks, financial fraud, and unauthorized charges on their payment accounts.
Under Texas state law, including the Texas Identity Theft Enforcement and Protection Act, organizations operating within the state have a strict legal duty to implement reasonable security procedures and practices to safeguard sensitive personal information from unauthorized access, destruction, use, modification, or disclosure. When an entity experiences a breach of this magnitude, it frequently serves as strong evidence that the organization failed to maintain adequate technical safeguards, such as robust encryption, multi-factor authentication, or timely software updates. This failure to secure consumer and donor data represents a potential breach of legal duties and industry-standard security obligations.
Receiving a data breach notification letter from Theology of the Body Evangelization Team is an official admission that your personal information was exposed due to inadequate security measures. Under the law, this notification provides affected individuals with the legal standing necessary to participate in a class action lawsuit against the organization. You do not need to wait until you suffer actual financial loss or identity theft to take legal action; the compromise of your private data is itself an injury. Our law firm is investigating this data breach on a contingency fee basis, meaning there are no out-of-pocket costs or upfront fees, and we only collect compensation if we successfully recover damages on your behalf.
Notification Delay: Approximately 12 days elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from Theology of the Body Evangelization Team
You were a customer, patient, employee, or client of Theology of the Body Evangelization Team
Your personal information was stored in Theology of the Body Evangelization Team's systems
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Your Theology of the Body Evangelization Team notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Theology of the Body Evangelization Team typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Deadlines apply to breach claims. A free review of your Theology of the Body Evangelization Team letter takes minutes, and we only get paid if you do.
Security Incident
2025-11-20
An unauthorized party accessed Theology of the Body Evangelization Team systems that stored personal information.
Reported to Attorney General
December 2, 2025
Theology of the Body Evangelization Team's disclosure was logged with the Texas Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to Theology of the Body Evangelization Team letter recipients — the exact mix depends on state law and the data types exposed:
States like Texas may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
These organizations also reported breaches to the Texas Attorney General. If their letters reached you too, each may carry its own claim.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris