Vernon & Waldrep Data Breach Impacts 16,876 Patients: Medical Info Exposed

Vernon & Waldrep OB-Gyn Associates, a women's health medical practice based in Dallas, Texas, disclosed a data breach that affected thousands of patients.

The breach was reported to the Texas Attorney General on Sept. 11, 2026, with 16,876 Texas residents identified as affected.

On Aug. 1, 2026, Global Secret Group, a ransomware group, posted on the dark web, claiming it obtained 274 GB of data from the practice.

The dark web posting listed multiple internal data categories that the group claimed to have compromised. The categories included BookkeepingHR, ClinicalScans, Email, FrontOffice, Home, LabtechUpdateCache, Main, MedicalRecords, Share, VWShare and Windir.

The group also published a full file tree of the stolen data. These folder names covered multiple areas of the practice's internal systems, from patient medical records and clinical scans to bookkeeping, human resources, email, front office files and shared network drives.

The types of consumer information confirmed to have been exposed in the breach included names, addresses, dates of birth, medical information and health insurance information.

Vernon & Waldrep's response to the breach

Vernon & Waldrep OB-Gyn Associates is notifying affected individuals about the breach through U.S. Mail. Those who have been patients of the practice may receive a notification letter containing details about what information may have been compromised.

Patients who have questions about the breach can contact the practice at 972-566-4660. The office is generally open weekdays from 9 a.m. to 5 p.m.