Resource Center of Dallas, Inc. Data Breach Notice (Massachusetts Attorney General)

The filing from Resource Center of Dallas, Inc. shows that medical records belonging to 13 Massachusetts residents were exposed. Because these records contain lifelong details about diagnoses, treatments, and health history, the information cannot be replaced or reset the way a credit card or password can.

Medical records retain their value indefinitely

Unlike financial account numbers that issuers can close and reissue, medical records tie directly to your identity and health history for life. Once exposed, they remain sensitive. Identity thieves, insurers, fraudsters, and even employers or landlords have used this kind of information in the past to commit medical identity theft, file false claims, or discriminate based on pre-existing conditions.

The record lists only medical records as the exposed category. No passwords, Social Security numbers, financial data, or other government identifiers appear in the filing. This means the immediate risk centers on misuse of your health information rather than direct account takeovers or tax fraud.

What this exposure enables

With access to detailed medical records, someone could:

• Submit fraudulent claims to insurance companies in your name, which may lead to denied future claims or unexpected bills landing on your statements.
• Impersonate you when seeking medical care, prescriptions, or controlled substances.
• Attempt to sell the records on underground markets where health data commands high prices precisely because it cannot be changed.

The small number of people affected — just 13 — suggests this was a narrowly targeted or limited incident rather than a mass compromise of an entire database. Still, for those whose records were included, the consequences are permanent.

The letter is the only reliable way to know if you are affected

Resource Center of Dallas, Inc. is required to notify affected individuals directly, usually by mail. If you have not received a letter, it is likely your records were not part of this incident. However, because the filing does not state when the incident occurred, anyone who has moved in recent years should contact the organization directly to confirm whether their information was involved. Absence of a letter is generally meaningful, but it is not absolute proof.

Why medical data is different from other breaches

Most people focus on credit monitoring after a breach. In this case, that is secondary. The core issue is that your health history is now potentially in the hands of unknown parties. Insurance companies sometimes flag unusual claims, but you cannot count on them to catch every instance of medical identity theft. The burden of vigilance falls on you.

Because no permanent biographic identifiers such as Social Security numbers were listed in the filing, the risk of broad identity theft is lower than in many other incidents. This is genuinely good news within an otherwise serious situation. The exposure is narrow, but the data that was exposed is among the most sensitive a person can have.

Protecting yourself when medical records are exposed

Start by reviewing every Explanation of Benefits statement from your health insurers as soon as they arrive. Look for services you did not receive or providers you did not visit. Report anything suspicious immediately.

Contact your health insurance company and ask them to flag your file for review. Many carriers can add a note requiring extra verification before processing new claims. Do the same with any pharmacy benefit manager you use.

Request a copy of your medical records from Resource Center of Dallas, Inc. and from every provider you have used in the past several years. Having your own baseline copy makes it easier to spot discrepancies later.

Consider placing a fraud alert with the three major credit bureaus even though no financial data was listed. While not strictly required here, it adds a layer of protection if someone attempts to open accounts using information derived from your medical records.

Finally, monitor your health insurance statements and credit reports for at least the next 24 months. Medical identity theft can surface slowly when fraudulent claims work their way through the system.

The filing was made on July 16, 2026. Because the record gives no separate incident date, it is impossible to know how long the information may have been at risk before notification. What matters now is that the exposure has been acknowledged and that the 13 affected individuals face a specific, lasting risk tied to their health history.