Vernon & Waldrep OB-Gyn Associates Data Breach: 16,876 Texans Notified, No Lawsuit Yet
Reference Guide
Vernon & Waldrep OB-Gyn Associates, a women’s health practice in Dallas, found a network intrusion on July 28, 2026. It reported the breach to the Texas Attorney General on September 11, 2026, listing 16,876 Texas residents. Names, dates of birth, diagnosis, lab and insurance details may be involved. As of October 18, 2026, we found no filed lawsuit, no settlement and no claim form — only law firms investigating.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Happened in the Vernon & Waldrep Breach
In a notice dated September 10, 2026, the practice says it became aware on or around July 28, 2026 of a network intrusion that affected a limited number of systems. It hired outside forensic experts. Their investigation could not rule out that an unknown actor accessed patient information; the practice says it has seen no sign of misuse.
Per the notice, the affected data includes first and last name plus one or more of: address, phone number, date of birth, treatment and diagnosis information, claim information, medical provider name, lab results and health insurance information. What applies to you varies — your own letter says which fields were in your record. As reported from the Texas filing, Social Security numbers and financial account numbers are not listed.
Separately, a ransomware group claimed on August 1, 2026 that it had taken 274 GB of data from the practice, posting folder names such as medical records and clinical scans. That is the attackers’ claim. The practice has not confirmed the group’s identity in its filing.
Case details
No court case found. As of October 18, 2026, we found no Vernon & Waldrep OB-Gyn Associates data breach lawsuit — no complaint, no court and no case number. Our check of federal court filings under the practice’s name found nothing, but that check only covers recent filings (CourtListener could not be searched). Law firms, including attorneys working with ClassAction.org, say they are “looking into whether a class action lawsuit can be filed” — that is an investigation, not a lawsuit. We could not search Dallas County state court records, so a state-court filing cannot be fully ruled out; we will update this page if one appears.
Status: Breach Confirmed, No Lawsuit, No Settlement
The headcount: the Texas Attorney General filing of September 11, 2026 lists 16,876 Texas residents. One breach tracker reports 17,435 people nationwide; we could not confirm that figure in an official filing, so treat the Texas number as the confirmed one.
Am I Affected?
If you were a patient of Vernon & Waldrep OB-Gyn Associates, the deciding fact is the letter. The practice mailed notices to affected people. Keep the letter and envelope — they list your exposed data and would prove membership if a class action is ever filed.
No letter, or lost it? Call the practice’s incident call center at 877-769-1112, Monday to Friday, 8 a.m. to 8 p.m. Central Time. You do not need to sign up anywhere to stay eligible for a future case.
Is There Money? Not Now
For context only: when healthcare-breach cases do settle, payments usually combine reimbursement of documented losses, a small flat payment and sometimes credit monitoring. Our data breach settlement calculator shows what comparable cases paid. Live claim deadlines are on our open settlements list.
Vernon & Waldrep Breach Timeline
July 28, 2026 — Intrusion Discovered
The practice becomes aware of a network intrusion affecting a limited number of systems and brings in forensic experts.
August 1, 2026 — Ransomware Group Claims Attack
A ransomware group posts the practice on its leak site, claiming 274 GB of data. The practice has not confirmed the group’s identity.
September 10, 2026 — Notice Posted
Vernon & Waldrep publishes its notice of a data security incident on its website. The notice says affected people were notified by U.S. mail.
September 11, 2026 — Texas Attorney General Report
The breach is reported to the Texas Attorney General, listing 16,876 Texas residents.
September 2026 — Law Firms Start Investigating
Plaintiff firms announce investigations into a possible class action. None had filed a case that we could find.
October 18, 2026 — No Lawsuit Found
No complaint, no settlement, no administrator, no claim form and no deadline.
Three Things to Watch For
OB-GYN records are among the most sensitive there are, and a breach with no settlement leaves room for imposters:
“Vernon & Waldrep settlement claim” sites
There is no settlement and no claims portal. A page asking for your Social Security number or bank details to “claim your payment” is collecting data — and the breach, as reported, did not even include Social Security numbers.
Callers who know your diagnosis or insurer
The leaked fields include diagnosis, lab and insurance details, which makes a caller sound like your doctor’s office or insurer. Hang up and call back on a number you look up yourself; the practice’s incident line is 877-769-1112.
Extortion messages about your medical records
The attackers claimed to hold medical records and clinical scans. If anyone contacts you threatening to publish your records unless you pay, do not pay or reply — report it to the FBI at ic3.gov and tell the practice.
Vernon & Waldrep Data Breach — Questions People Ask
Short answers to the questions people ask most about this case.
Is there a Vernon & Waldrep OB-Gyn Associates data breach lawsuit?
Not that we could find. As of October 18, 2026, law firms are investigating, but we found no filed complaint, court or case number. There is no settlement.
How many people were affected?
The Texas Attorney General filing of September 11, 2026 lists 16,876 Texas residents. One tracker reports 17,435 nationwide, which we could not confirm in an official filing.
What data was exposed?
Per the practice’s notice: name plus one or more of address, phone number, date of birth, treatment and diagnosis information, claim information, medical provider name, lab results and health insurance information. It varies by person.
How can I check if I have been data breached?
For this incident, check your mail for a letter from Vernon & Waldrep, or call its call center at 877-769-1112 (weekdays, 8 a.m. to 8 p.m. Central). A letter is the most reliable proof you were included.
How much compensation do you get for a data breach?
For this breach, nothing is available: no lawsuit has been found and there is no settlement or fund. Amounts in other cases depend on the settlement terms and your documented losses; see our data breach settlement calculator for comparable cases.
Did hackers really steal my records?
The practice says its forensic investigation could not rule out access and that it has seen no misuse. A ransomware group claimed on August 1, 2026 to have taken 274 GB, but that is the attackers’ claim, not confirmed by the practice.
Is the letter from Vernon & Waldrep real?
The practice confirmed the incident in a notice dated September 10, 2026 on its own website and says it notified people by U.S. mail. If in doubt, call 877-769-1112 rather than any number in an email or text.
What should I do right now?
Read your health insurer’s explanation-of-benefits statements for care you never received. Consider a fraud alert or credit freeze — free under federal law. Keep your notice letter.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements currently accepting claims, with deadlines
- Data Breach Settlement CalculatorWhat comparable breach settlements have paid per person
- Family Medical Associates of RaleighAnother small medical practice breach with no lawsuit yet
- Downriver Pediatric Associates BreachPediatric practice hit through a vendor, early-stage lawsuits