CoreRecon Threat Intelligence  •  Senior Living & Assisted Living  •  June 2026

TX Senior Living:
207-Day Blind Spot

Avamere Health (380K resident records, ALPHV), Prospect Medical (1.3M, Rhysida), Deer Oaks TX ($225K ransom), HHSC Medicaid breach — ransomware gangs are targeting Texas ALFs, SNFs, and memory care communities. The average detection gap is 207 days. MatrixCare and PointClickCare credentials are being harvested today. HIPAA, HHSC licensing, CMS Conditions of Participation, and TDPSA create a quadruple regulatory exposure no other TX sector faces.

Download the Full Threat Brief — Free
June 2026 CoreRecon Intelligence Report V36 60+ Verified Sources HIPAA + HHSC + CMS + TDPSA
207
Days average dwell
time in LTC — attackers
idle in EHR systems
1.76M
Resident PHI records
exposed — 4 named
LTC incidents 2023–2024
4
Regulatory tracks on
one breach: HIPAA,
HHSC, CMS, TDPSA
$10.93
Per-PHI-record breach
cost — healthcare
highest 15 years running
What This Brief Covers

TX Senior Living &
Assisted Living
Cyber Threat Brief

Full intelligence report on the attack surface facing Texas ALFs, SNFs, and memory care communities — from the ALPHV Avamere breach (380K resident records) and Rhysida Prospect Medical attack (1.3M), to Deer Oaks TX ransomware ($225K), HHSC Medicaid vendor breach, and the MatrixCare/PointClickCare credential theft pipeline that connects hundreds of TX facilities to a single attack vector. Covers HIPAA OCR enforcement, TX HSC §242/§247 HHSC licensing risk, CMS Conditions of Participation survey impact, and TDPSA private right of action. 60+ verified sources. 8 ALF/SNF-specific controls. 90-day hardening roadmap built for facility administrators, compliance officers, and ownership groups.

60+ Verified Sources Including:

  • Avamere Health breach notification — ALPHV/BlackCat, 380K resident records, three-state SNF network, EHR/MAR exposure
  • Prospect Medical Holdings (Rhysida) — 1.3M patients/residents, 16 hospitals + 165 LTC facilities, TX-affiliated disruption
  • Deer Oaks TX behavioral health ALF — $225K ransom, EHR exfiltration, HHSC reportable event, TDPSA exposure
  • HHSC Medicaid TX vendor breach (2024) — PHI of Medicaid-funded residents, state audit, BAA gap findings
  • HHS/OCR HIPAA enforcement guidance — breach notification timelines, civil money penalties, willful neglect enforcement
  • TX HSC §242 (nursing facilities) + §247 (assisted living) — HHSC licensing obligations and reportable event requirements
  • CMS Conditions of Participation (42 CFR §483) — Immediate Jeopardy citation criteria, Medicare decertification risk
  • TDPSA (Texas HB 4, July 2024) — private right of action for residents, AG enforcement, $7,500/violation penalty
  • MatrixCare/PointClickCare attack surface — credential stuffing vectors, family portal risks, MDS submission chain
  • 8 ALF/SNF controls + 90-day hardening roadmap with HIPAA, HHSC, and CMS compliance mapping

Access the Full Brief

We email it once. No newsletter. No spam. PDF delivered to your inbox.

Work email required. Free email providers (Gmail, Yahoo, Outlook, etc.) are not accepted. By submitting, you consent to CoreRecon processing your information per our privacy policy.

We use the contact details you provide to deliver this brief and respond to your request. Please do not include patient, client, account, case, or other sensitive information in this form.

Submission failed — please try again or email john@corerecon.com

Brief Sent.

Check your inbox — the PDF is on its way. If it lands in spam, drag it to your inbox so you find it later.

Questions before then? Call (800) 955-2596 — live TX SOC, not a call center.

Book Free Posture Assessment →
SDVOSB Certified • TX-Based SOC • No offshore data routing
Questions? (800) 955-2596
✅ 60+ verified sources
✅ HIPAA + TX HSC §242/§247 + TDPSA + CMS CoP
✅ 4 named incidents: Avamere, Prospect Medical, Deer Oaks, HHSC
✅ EHR-aware: MatrixCare, PointClickCare, EMAR, MDS
✅ No spam — one email delivery