Almeida Law Group is investigating a data breach at Flowco Holdings Inc. The breach was discovered on September 18th, 2026. If you were affected, contact Almeida Law Group.
About Flowco Holdings Inc.
Flowco Holdings Inc. (NYSE: FLOC) is a publicly traded energy-sector company headquartered at 1300 Post Oak Boulevard, Suite 450, Houston, Texas. The company provides production optimization, artificial lift, and emissions management and monetization solutions for the oil and natural gas industry. It operates through two segments — Production Solutions and Natural Gas Technologies — and has approximately 1,281 employees. Flowco was formed through a 2024 business combination of Flowco Production Solutions, Estis Compression, and Flogistix, and went public in January 2025.
What Happened?
Flowco Holdings Inc. was listed in a Texas Attorney General data security breach report (record BR-0005398), published October 6th, 2026. The filing states the breach was discovered on September 18th, 2026, and that 2,477 individuals were affected. Consumers were notified by U.S. Mail. The data types confirmed in the filing include names, Social Security numbers, driver’s license numbers, government-issued ID numbers, medical information, and health insurance information.
On August 11th, 2026 — more than five weeks before Flowco’s stated discovery date — the ransomware group Settra claimed responsibility for an attack on Flowco on its dark web leak site, as reported by dark web monitoring sources including Ransomware.live, Breachsense, and DeXpose. Settra alleged the attack occurred around June 30th, 2026, and claimed to have exfiltrated approximately 1,200 GB of data. These are unverified attacker allegations; Flowco has not publicly confirmed the ransomware claim, the alleged attack date, or the claimed data volume. The gap between Settra’s public posting on August 11th, 2026 and Flowco’s stated discovery date of September 18th, 2026 may be relevant to questions about the timeliness of consumer notification. As of August 12th, 2026, attorneys were also reported to be investigating whether a class action lawsuit could be filed on behalf of affected individuals; no filed lawsuit has been publicly reported as of the research date.
Key Facts at a Glance
- Company or Organization: Flowco Holdings Inc.
- Industry: Oil & Gas Equipment & Services (Energy sector)
- Location: Houston, Texas
- Incident type: Data breach (ransomware attack alleged by Settra group; company-confirmed breach per Texas Attorney General filing)
- Date breach discovered: September 18th, 2026
- Date of consumer notification: October 6th, 2026 (Texas Attorney General filing date)
- Total persons affected: 2,477
- Litigation status: Attorney investigation into potential class action reported as of August 12th, 2026; no filed lawsuit confirmed
- Source: Texas Attorney General Data Security Breach Report (BR-0005398); ClassAction.org – Flowco Data Breach Investigation; Ransomware.live – Flowco victim listing; DeXpose – Settra Ransomware Attack on Flowco Production Solutions; Breachsense – August 2026 Data Breaches
What Should You Do?
If you received a notice from Flowco Holdings Inc., consider enrolling in any identity theft protection services offered and note the enrollment deadline specified in your letter. Because Social Security numbers, government-issued IDs, medical information, and health insurance information were confirmed to be involved, you should place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and regularly monitor your credit reports at AnnualCreditReport.com. Review your Explanation of Benefits statements and medical records for any services you did not receive, as health and insurance information was among the compromised data. You can also report suspected identity theft and get a personalized recovery plan at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
