What is a letter from AngMar Management Services c/o CyberScout?
A letter from AngMar Management Services c/o CyberScout is AngMar's notice of the data security incident it identified on July 20, 2026, in which information may have been accessed or acquired on or around July 18, 2026. In the copy of the notice letter published by ClassAction.org, the return address is AngMar Management Services c/o Cyberscout in Dearborn, MI, and the credit monitoring offered is provided by Cyberscout, a TransUnion company. That copy is stamped Draft, so the wording of letters actually mailed may differ.
What are the key facts about the AngMar Management Services data breach?
Who sent it
AngMar Management Services, a privately held company based in Mansfield, TX that manages the operations of more than 90 locations across 11 states, including the Angels Care Home Health umbrella and other brands. AngMar Management Services (company website)
The letter says the information was provided to AngMar in the normal course of business and in connection with management services provided by AngMar, and that the investigation determined information related to the recipient may have been impacted. Copy of the notice letter published by ClassAction.org (stamped Draft)
The letter copy is dated September 22, 2026. Filed with the New Hampshire Attorney General on September 22, 2026, the Massachusetts Attorney General on September 23, 2026 and the Texas Attorney General on September 25, 2026 (see the timeline below). The date a given letter was mailed is not in our record. Copy of the notice letter published by ClassAction.org (stamped Draft)
Number affected
HIPAA Journal reports that the HHS Office for Civil Rights breach portal was updated to show 126,196 individuals. The Texas Attorney General register lists 35,916, which HIPAA Journal reports as Texas residents, and the Massachusetts filing counts 3 Massachusetts residents. HIPAA Journal (published Oct 2, 2026; updated Oct 5, 2026)
Data types
First and last name, in combination with address, date of birth, Social Security number, patient ID, medical record number, health insurance information, service date, diagnosis or condition information, provider name, prescription information, and/or medical history information. The letter says these types may have been included, not that every person had all of them. Copy of the notice letter published by ClassAction.org (stamped Draft)
Help offered
The draft copy published by ClassAction.org offers twelve months of single bureau credit monitoring, credit report and credit score services at no charge, provided by Cyberscout, a TransUnion company; the copy embedded on ClaimDepot leaves the duration blank. Dedicated assistance line 1-877-520-9311, Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern Time (excluding U.S. holidays). The ClaimDepot copy, which includes the Steps You Can Take enclosure, says to enroll within 90 days from the date of the letter and that you may place a fraud alert or credit freeze with TransUnion, Experian and Equifax. Both copies recommend reviewing credit reports and account statements for suspicious activity. Copy of the notice letter published by ClassAction.org (stamped Draft)Copy of the notice letter embedded on ClaimDepot (includes the Steps You Can Take enclosure; monitoring duration left blank)
Sources differ on some figures. The incident card and timeline further down this page come from the Breach Census register record and show June 25, 2026 as the occurrence date and 110,256 individuals. HIPAA Journal gives on or around July 18, 2026 and, in its HHS update, 126,196 individuals. The Texas notice explainer further down this page describes the Texas count as Texas residents only, which matches HIPAA Journal reporting 35,916 as Texas residents and the Texas register field Breach Census reads for that count, which is named for Texans affected. Checked October 28, 2026.
AngMar Management Services is an organisation in Texas. It appears on the Massachusetts Attorney General breach-notification register, the Texas Attorney General breach-notification register and the New Hampshire Attorney General breach-notification register with 1 confirmed incident (3 filings); the most recent notice was filed on September 25, 2026.
Governed by Tex. Bus. & Com. Code §521.053. Notice to the Attorney General is required when a breach affects at least 250 Texas residents.
Note: the count is Texas residents only, not a total; the register’s underlying data also carries a separate national-total field, not shown in its public table, which this site uses to fill an incident-level records-affected figure that is otherwise empty.
Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.
Note: the count is Massachusetts residents only, not a total.
Questions about the AngMar Management Services letter
What does c/o CyberScout mean on an AngMar Management Services letter?
The abbreviation c/o means care of. In the copy of the notice letter published by ClassAction.org, the return address is AngMar Management Services c/o Cyberscout, PO Box 1286, Dearborn, MI 48120-9998, and the credit monitoring offered is provided by Cyberscout, a TransUnion company. The letter is signed AngMar Management Services.
Who is AngMar Management Services?
AngMar Management Services is a privately held company based in Mansfield, TX that manages the operations of more than 90 locations across 11 states, including the Angels Care Home Health umbrella and other brands.
Why did I get a letter from AngMar Management Services?
The letter says AngMar identified unusual activity on its network on July 20, 2026, that information may have been accessed or acquired on or around July 18, 2026, and that the investigation determined information related to the recipient may have been impacted. It says the information was provided to AngMar in the normal course of business and in connection with management services provided by AngMar.
What information was involved in the AngMar Management Services data breach?
First and last name, in combination with address, date of birth, Social Security number, patient ID, medical record number, health insurance information, service date, diagnosis or condition information, provider name, prescription information, and/or medical history information. The letter says these types may have been included, not that every person had all of them.
How many people were affected by the AngMar Management Services data breach?
HIPAA Journal reports that the HHS Office for Civil Rights breach portal was updated to show 126,196 individuals. The Texas Attorney General register lists 35,916, which HIPAA Journal reports as Texas residents, and the Massachusetts filing counts 3 Massachusetts residents.
What help does the AngMar Management Services letter offer?
The draft copy of the notice letter published by ClassAction.org offers twelve months of single bureau credit monitoring, credit report and credit score services at no charge, provided by Cyberscout, a TransUnion company; the copy embedded on ClaimDepot leaves the duration blank. The ClaimDepot copy says to enroll within 90 days from the date of the letter. The dedicated assistance line is 1-877-520-9311, Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern Time (excluding U.S. holidays).
What should I do after receiving an AngMar Management Services breach letter?
Keep the letter and use the assistance line and enrollment details printed in it rather than links in unexpected messages. Both published copies of the letter recommend reviewing credit reports and account statements for suspicious activity, and the ClaimDepot copy, which includes the Steps You Can Take enclosure, says you may place a fraud alert or credit freeze with TransUnion, Experian and Equifax.