HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Texas Capital Bank

bd_b938f7a07c457675 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 27, 2026

Filed

May 28, 2026

To disclose

4 weeks

Affected

5,134state residents only

Linked

5 filings

Confidence

70%

Full breach record for Texas Capital Bank →2 incidents on file

Texas Capital reported unauthorized access to customer data affecting 5,134 Washington residents. The incident occurred between April 26 and 27, 2026, and was discovered on April 27, 2026. Affected data likely included identity and financial information. The company offered two years of Experian IdentityWorks monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d4 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 4 weeks / 31 days

Apr 26, 2026

Begins

Apr 27, 2026

Discovered

May 28, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_7881526cbabc33462026-05-28Verified
Texas State AGbd_a1b87bfd2bc73fc52026-05-29 · +1dVerified
Massachusetts State AGbd_d76f4559a76cba522026-06-01 · +4dVerified
Oregon State AGbd_08a994e4c4c75b0c2026-06-03 · +6dVerified

Name: Texas Capital Bank
norm: texas capital bank
Domain: texascapitalbank.com
Industry: Finance

Name: Texas Capital Bank
norm: texas capital bank
Domain: texascapitalbank.com
Industry: Finance
Industry: Financial Servicesllm

Discovered: Apr 27, 2026
Breach occurred: Apr 26, 2026 – Apr 27, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: May 28, 2026
Affected individuals: 5,134state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: NameSocial Security numberDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Washington State Attorney General
Initial access: valid_credentials

During the incident: Offering a complimentary two-year membership of Experian’s IdentityWorks
Providing information on how to place a security freeze on credit reports
Providing information on how to obtain free credit reports
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGMay 28 · first

Washington State AGMay 28 · first · this page

Texas State AG+1d

Massachusetts State AG+4d

Oregon State AG+6d

Pattern: first filing May 28 (CA), last Jun 3 (OR) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA41097.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2026
Raw hash: 6cc02495fc70add8e9f23b6553909882462b69ea24c35e881813cb483df7d5b6

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityTexas Capital Bank

Victim entityTexas Capital Bank

Incidentdiscovered Apr 27, 2026

Stated responseOffering a complimentary two-year membership of Experian’s IdentityWorks

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com