Drury Southwest Reports Data Breach Exposing Sensitive Personal and Health Information On December 5, 2025, Drury Southwest, a Texas-based company, notified the state’s Attorney General of a data breach involving unauthorized access to sensitive personal and protected health information. The incident, which remains under investigation, may have exposed a range of data, including names, Social Security numbers, driver’s license details, financial account information, and medical records. As of December 9, 2025, Drury Southwest has not released further public details about the breach’s scope or the number of affected individuals. However, the company has begun notifying impacted parties, as required by the Texas Attorney General’s breach reporting process. The exact timeline of the unauthorized access and the method used by the threat actor have not been disclosed. The breach highlights ongoing risks to personal and health-related data, particularly in sectors handling sensitive information. Further updates may emerge as the investigation progresses.