What Happened
Arnold Oil Company of Austin, L.P. discovered suspicious network activity on January 22, 2025, and determined that unauthorized access occurred between January 20-22, 2025. The breach affected at least 866 individuals (865 Texas residents and one in New Hampshire), compromising personally identifiable information and protected health information including names, dates of birth, driver’s license or state ID numbers, Social Security numbers, health insurance information, and medical information. The company began notifying affected individuals on August 15, 2025, and disclosed the breach to the New Hampshire and Texas Attorneys General. Arnold Oil offered 12 months of free TransUnion Cyberscout credit monitoring and identity protection services to those affected.
