Apex Clean Energy Data Breach Investigation
A Texas Attorney General regulatory listing reports a data incident involving Apex Clean Energy Holdings, LLC and certain personal information. The available record identifies categories of potentially affected data but does not specify the incident type, discovery date, or consumer notice date. Strauss Borrelli PLLC is investigating the reported incident and the rights of affected individuals. If you received a notice or believe your information may be involved, you may use the secure contact form on this page to ask whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Apex Clean Energy Holdings, LLC (Energy)
- Incident Type: Not specified in the supplied regulatory data
- Date of Incident: Not reported in the supplied regulatory data
- Discovery Date: Not reported in the supplied regulatory data
- Reported Date: November 3, 2026
- Exposed Information: Names, Social Security numbers, driver’s license numbers, financial account numbers, health records, and health insurance information
- Affected Population: 1,387 Texans, as reported in the supplied Texas regulatory data
What Happened?
According to information reported through the Texas Attorney General’s data security breach portal, Apex Clean Energy Holdings, LLC was associated with a reported incident spanning March 17 through March 23, 2026. The supplied regulatory data does not describe how access occurred, whether malware or ransomware was involved, whether a third party played a role, or when the company discovered the event. It also does not provide a confirmed date on which individual notices were sent.
The record was publicly listed on the Texas portal on November 3, 2026. The Attorney General’s portal cautions that the number of affected Texans and notice details may change after publication. Readers should therefore rely on any notice they receive for person-specific information and should not assume every listed data category applied to every individual. The available information supports describing this as a reported data incident without assigning a cause or reaching conclusions beyond the regulatory data.
What Information Was Exposed?
The Texas regulatory data lists names, Social Security numbers, driver’s license numbers, financial account numbers, health records, and health insurance information as potentially affected. The record does not establish that every data element was involved for every person.
These data combinations may create risks of identity theft, fraudulent account activity, medical identity theft, false insurance claims, or convincing impersonation attempts. Because the entity operates in the energy sector, affected individuals should also watch for vendor-invoice manipulation, supply-chain phishing, employee tax-form scams, and messages impersonating company executives, benefits administrators, financial institutions, or insurance providers. The filing does not state that any such misuse has occurred.
What Should You Do Next?
- Review and preserve your notice: Keep any letter or email concerning the incident. Compare its description of the affected information with the regulatory listing, and retain records of expenses, suspicious communications, and time spent addressing potential misuse.
- Consider credit freezes or fraud alerts: A credit freeze can make it harder for someone to open a new account in your name. Contact Equifax, Experian, and TransUnion separately, and use only official credit bureau websites.
- Monitor financial and credit activity: Review bank, credit card, loan, and credit reports for unfamiliar transactions or accounts. Promptly report suspected fraud to the relevant financial institution and ask about replacing compromised account numbers when appropriate.
- Check health and insurance records: Examine explanation-of-benefits statements, medical bills, insurance claims, and patient portal activity for services or prescriptions you do not recognize. Report discrepancies to the provider and insurer in writing.
- Be alert for targeted phishing: Verify unexpected requests involving invoices, payroll records, W-2 forms, benefits, insurance verification, or account resets through a trusted phone number. Do not provide passwords or verification codes in response to unsolicited messages.
Your Legal Rights
People whose information may have been involved could have rights under applicable state privacy, consumer-protection, data-security, or breach-notification laws. Depending on the facts, those rights may include receiving notice, requesting information about the incident, and seeking compensation for legally recognized losses caused by inadequate data protection or delayed notification.
Potential losses may include unreimbursed fraudulent charges, credit-monitoring costs, expenses incurred responding to identity theft, and other documented harm. Whether a viable individual or class claim exists depends on the evidence, applicable law, and each person’s circumstances. Legal deadlines may apply, so affected individuals should preserve relevant records and seek qualified advice. This general information is not individualized legal advice.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC investigates data incidents involving sensitive personal, financial, and health information. The firm evaluates regulatory filings, consumer notices, security representations, and documented harm to determine whether affected individuals may have legal claims. A confidential consultation can help you understand the investigation, identify records worth preserving, and learn whether your circumstances may qualify for representation. Contacting the firm does not guarantee that a claim exists or that any particular outcome will be achieved.
If you received a breach notification letter from Apex Clean Energy Holdings, LLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
