RevSpring (TN, United States) notified the California Attorney General, the Vermont Attorney General and the Texas Attorney General of a data breach on 4 November 2026. It told the states about 6,252 Texas residents; the total can be higher.
People affected
6,252Texas residents · one state’s count, the total can be higher
Reported
4 November 2026Official notice and 2 more
Time to tell
173 daysfrom 15 May 2026 · the median is 147
Across the state notices
at least 6,821 people (Vermont and Texas: each state counts only its own residents)
Found to notice
79 days (found 17 August 2026, by the company’s letter)
What was exposed 4
Social Security numbers
Dates of birth
Names
Addresses
How it happened
How
Hacking an unauthorized person may have gained access to a RevSpring support toolsource
On August 17, 2026, RevSpring discovered that an unauthorized person may have gained access to a RevSpring support tool
Began
the unauthorized person successfully used the support tool between May 15, 2026 and June 1, 2026
People
This incident involves 216 individuals in Rhode Island
Exposed
The information involved varies by individual but may include your name, home address, email address, phone number, date of birth, Social Security number, and/or your location of service
Offered
we have secured the services of Kroll to provide identity monitoring at no cost to you for <<ServiceTerminMonths>> months. Kroll is a global leader in risk mitigation and response, and their team has extensive experience helping people who have sustained an unintentional exposure of confidential data. Your identity monitoring services include Credit Monitoring, Fraud Consultation, and Identity Theft Restoration
RevSpring (TN, United States) notified the California Attorney General, the Vermont Attorney General and the Texas Attorney General of a data breach on 4 November 2026. It told the states about 6,252 Texas residents; the total can be higher. How it happened, by the sources: hacking.
What data was exposed in the RevSpring breach?
Social Security numbers, Dates of birth, Names and Addresses, by the notices and reports on this page.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. The letter it filed is on this page. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a RevSpring data breach settlement?
No settlement open for claims is on record for RevSpring as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.
Is a letter, email or text about the RevSpring breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to RevSpring’s own site, or check the letter here.
Privacy Unpacked