On November 17, 2022, The Rosewood Corporation reported a data breach with the Attorney General of Texas after an unauthorized party was able to access sensitive consumer information in the company’s possession. According to Rosewood, the breach resulted in the names, addresses, Social Security numbers, driver’s license numbers, government identification numbers, and health insurance information belonging to certain individuals being compromised. Recently, Rosewood sent out data breach letters to all affected parties, informing them of the incident and what they can do to protect themselves from identity theft and other frauds.

Those who receive a data breach letter from the Rosewood Corporation should be aware of the risks they now face as a result of the breach. As we’ve discussed in previous posts, the hackers that orchestrate these cyberattacks do so with one goal—to put money in their pockets. Typically, hackers will either sell the information they obtain through a breach or use it themselves to commit identity theft and other frauds against the victims. Depending on the extent of the fraud committed against a victim, it can cost thousands of dollars and take countless hours to resolve. While companies are in the best position to prevent these attacks, the unfortunate reality is that many large corporations do not prioritize data security.

What We Know About the Rosewood Corporation Data Breach

The available information regarding the Rosewood Corporation breach comes from the company’s filing with the Texas Attorney General. However, the Rosewood Corp. has not posted notice of the breach on its website, and the Texas AG’s “Data Security Breach Reports” page only offers limited information. Thus, all we know about the breach at this point is that it resulted in the following information being compromised:

• Names,

• Addresses,

• Social Security numbers,

• Driver’s license numbers,

• Government-issued identification numbers, and

• Health insurance information.

However, on November 17, 2022, Rosewood Corporation sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident. These letters should be individually addressed to each recipient and will clarify what data types were leaked.

Founded in 1976 and based in Dallas, Texas, the Rosewood Corporation operates several smaller subsidiaries in the investment and real estate industries. Some of the Rosewood Corporation’s business lines include Rosewood Private Investments, Rosewood Property Company, Rosewood Resources, Rosewood Management Corp., Wetlands Management, and Rosewood Ranches. The Rosewood Corporation is owned by the Caroline Hunt Trust Estate. Rosewood Corporation employs more than 175 people and generates approximately $49 million in annual revenue.