USUnited States · NY · Rockrose Development L.L.C.
Rockrose Development (NY, United States) notified the Texas Attorney General and the California Attorney General of a data breach on 12 December 2025. It told the states about 346 Texas residents; the total can be higher. Exposed: Social Security numbers, Driver’s license numbers, Health insurance details, Health and medical information, Financial account and card details and Names and more. The breach began on 4 July 2025, 161 days before it was reported.
Status
Confirmed breach
People affected
346 Texas residents (one state’s count; the total can be higher)
Reported
12 December 2025
Breach began
4 July 2025
Time to tell
161 days (the median in California’s notices over the last year: 154 days)
What was exposed
Social Security numbers
Driver’s license numbers
Health insurance details
Health and medical information
Financial account and card details
Names
Addresses
Before the notice: the ransomware gang Play named Rockrose Development on its leak site on 14 July 2025, 151 days before this was reported. Matched by the organisation’s name: the notice itself does not say who the attacker was.
Look for Rockrose Development L.L.C.’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Check your health insurer’s statements for treatment you never had.
Expect scams that use your details: calls, texts or emails pretending to be Rockrose Development L.L.C., your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
Privacy Unpacked