Encore Enterprises Data Breach Exposes Social Security Numbers and Health Info

Encore Enterprises, a privately held investment and real estate company headquartered in the Dallas-Fort Worth area, has disclosed a data breach affecting consumers in multiple states.

Founded in 1999, the company focuses on commercial real estate and middle-market investments. It describes itself as a vertically integrated firm with activities in development, acquisition, asset management and capital solutions.

The incident has so far impacted 1,746 Texas residents and 60 Massachusetts residents. The company began notifying affected individuals by U.S. Mail on Oct. 14, 2026.

The breach was reported to the Massachusetts Office of Consumer Affairs and Business Regulation and to the Texas Attorney General on Oct. 15, 2026.

On Aug. 2, 2026, CRPx0 posted on the dark web, claiming it had obtained approximately 700 GB of data from Encore Enterprises. The group intended to publish the stolen data within two to three days.

The dark web posting described a wide range of compromised information. The stolen data includes AWS S3 backups, server images, healthcare platform source code, patient medical records, employee account information, executive communications, financial records, subsidiary data and other sensitive corporate information.

The types of consumer information exposed in this breach include both personally identifiable information and protected health information such as names, Social Security numbers, addresses, test data and health insurance information.

Encore Enterprises' response to the breach

Individuals with questions about the incident may contact the dedicated assistance line at 1-855-474-9656, Monday through Friday, 8:00 a.m. to 8:00 p.m. EST, excluding holidays, or write to the company at 16980 Dallas Pkway, Suite 200, Dallas, TX 75248.

Individuals who may have been impacted should remain vigilant and review accounts for any suspicious activity.