Almeida Law Group is investigating a data breach at Encore Enterprises. The breach occurred on July 19th, 2026 – August 1st, 2026 and was discovered on September 18th, 2026. If you were affected, contact Almeida Law Group.
About Encore Enterprises
Encore Enterprises, Inc. is a privately held, diversified real estate investment and development company founded in 1999 by Dr. Bharat Sangani and headquartered in Dallas, Texas. The firm operates across multiple sectors including multifamily housing, hospitality, retail, office, gas stations, quick-service restaurants, healthcare, and private equity, with over $1.6 billion in assets under management. Its divisions include Encore Multifamily, Encore Hospitality, Encore Commercial, Encore Restaurants, Encore Construction, Surepoint Medical Centers, and Partnerships for Dentists. Because the company operates healthcare-related subsidiaries, it handles health insurance information in addition to the personal identifying information common to a large employer.
What Happened?
Encore Enterprises was listed in a Texas Attorney General data security breach report published on October 16th, 2026. According to the filing, the breach window ran from July 19th, 2026 through August 1st, 2026, and the company discovered it on September 18th, 2026. A total of 4,488 individuals were affected. The types of information involved included names, addresses, Social Security numbers, and health insurance information. Encore notified affected consumers by U.S. Mail.
Separately, dark web monitoring sources report that a ransomware group calling itself Crpx0 listed Encore Enterprises on its leak site around August 12th, 2026, claiming to have exfiltrated approximately 700 GB of data. According to reporting by GalaxyWarden, Encore had not publicly confirmed or denied that ransomware claim at the time of publication, and the Texas AG filing does not reference ransomware or name any threat actor. The breach window in the official filing overlaps with the ransomware group’s claimed timeline, but the two reports describe different data types, and whether they describe the same incident has not been officially established. ClassAction.org has listed the Encore Enterprises Data Breach 2026 among recent incidents under investigation, though no class action lawsuit had been filed as of October 16th, 2026.
Key Facts at a Glance
- Company or Organization: Encore Enterprises, Inc.
- Industry: Real estate investment and development; alternatives holding company (commercial real estate, hospitality, healthcare, private equity)
- Location: Dallas, Texas 75248
- Incident type: Unauthorized access to personal and health insurance information
- Date of breach: July 19th, 2026 – August 1st, 2026
- Date breach discovered: September 18th, 2026
- Date of consumer notification: October 16th, 2026
- Total persons affected: 4,488
- Litigation status: Listed on ClassAction.org as under investigation; no class action filed as of October 16th, 2026
- Source: Texas Attorney General Data Security Breach Report; GalaxyWarden — Crpx0 ransomware listing; ClassAction.org — Recent Data Breaches
What Should You Do?
If you received a notice from Encore Enterprises, review it carefully to understand what information about you was involved. Because Social Security numbers and health insurance information were exposed, you should place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—and monitor your credit reports for any accounts or inquiries you do not recognize. You can request free annual credit reports at AnnualCreditReport.com. If identity theft occurs or you notice suspicious activity, report it at IdentityTheft.gov, which provides a personalized recovery plan. Because health insurance information was involved, also review any Explanation of Benefits statements from your insurer for services you did not receive, and check your medical records for unfamiliar entries. If Encore offered identity theft protection services, enroll as soon as possible and note any enrollment deadline stated in your notice.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
