City of Houston data breach
Incident readout
- Company
- City of Houston
- Reported to
- Texas Attorney General
- Filed
- December 12, 2025
- People affected
- Not stated in the filing
- Incident type in filing
- Not stated
- Our review
- Investigation Open
Was this a ransomware attack?
The filing does not say ransomware was involved. We do not label an incident ransomware unless the company’s report says so. Whatever the cause, the steps to protect yourself and the legal question are the same.
What we know
The City of Houston is a municipal government entity responsible for providing essential public services to its residents. As a government agency, it collects and maintains sensitive personal information, including tax records, utility account details, employment files for municipal staff, and various public safety or administrative documents. In 2025, the City of Houston officially reported a data security incident to the Texas Attorney General, indicating that unauthorized access to its systems may have occurred. If you received a formal data breach notification letter, it means the city has identified that your personal information was potentially involved in this incident. This notice is intended to inform you of the nature of the event and the steps you should take to protect your identity and financial security.
See every breach reported in Texas or read what to do after a ransomware attack.
Other breaches reported in Texas
- Motility Software SolutionsTexas Attorney General · Filed October 23, 2026Count not stated
- Dill Dill Carr Stonbraker & Hutchings, P.C.Texas Attorney General · Filed October 23, 2026Count not stated
- Opportune LLPTexas Attorney General · Filed October 23, 2026Count not stated
- Region 9 Education Service CenterTexas Attorney General · Filed October 23, 2026Count not stated
- Sherman Independent School DistrictTexas Attorney General · Filed October 23, 2026Count not stated
- Networking Technology, Inc.Texas Attorney General · Filed October 23, 2026Count not stated
Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.