Costa Solutions Data Breach Impacts 22k: PHI and PII Exposed

Costa Solutions LLC, a San Antonio, Texas-based company that provides managed labor services for warehousing, freight logistics and supply chain operations, experienced a data breach in April 2026 that affected approximately 22,482 people in the United States, including 19,758 Texas residents.

The breach was disclosed to the attorneys general offices of Indiana, Massachusetts and New Hampshire starting on Sept. 9, 2026. Costa Solutions began notifying affected individuals on Sept. 9, 2026.

On April 17, 2026, Costa Solutions discovered the suspicious activity on its networks. The company then initiated a cybersecurity investigation to better understand the incident. It was discovered that between April 15 and April 20, 2026, unauthorized network activity occurred.

On April 29, 2026, a ransomware group known as Aur0ra posted a claim on the dark web using the Tor network. The group stated that it had obtained data belonging to the organization.

After detecting the suspicious activity, Costa Solutions carried out a comprehensive review of the files that may have been affected by the incident. On Aug. 10, 2026, the review determined that personal information of certain individuals may have been contained in data acquired without authorization.

The types of information potentially exposed in the breach included names, addresses, Social Security numbers, driver's license numbers, government-issued ID numbers (such as passports and state ID cards), dates of birth, medical information and health insurance information.

Costa Solutions' response to the breach

Costa Solutions is offering affected individuals 12 months of free identity theft protection services through IDX.

Affected individuals can enroll by calling 1-866-200-0969 or by visiting the IDX enrollment page. Individuals can also enroll by scanning the QR code included in their notification letter. The enrollment deadline is Dec. 9, 2026.

IDX representatives are available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time. Costa Solutions can also be reached directly at 726-999-8096.