---
title: Operator of the South Texas Project nuclear plant reports a data breach affecting about 1,175 people | ctxsec
url: https://ctxsec.com/items/stp-nuclear-operating-texas-ag-breach-notice-1175-people
description: "STP Nuclear Operating Co. filed a breach notice with the Texas AG on Oct 28 covering 1,175 people (1,173 Texans), with names, SSNs, birthdates and other data. The incident ran Sep 28 to 29. The filing gives no cause, and the NRC says the plant continues to operate safely."
status: "official filing (Texas Attorney General breach report posted Oct 28, as reported by the San Antonio Express-News and breach-notice trackers); cause not stated; NRC says plant operating safely"
published: 2026-10-31
---

> STP Nuclear Operating Co. filed a breach notice with the Texas AG on Oct 28 covering 1,175 people (1,173 Texans), with names, SSNs, birthdates and other data. The incident ran Sep 28 to 29. The filing gives no cause, and the NRC says the plant continues to operate safely.

[← Cybersecurity News](/news) · [markdown](/items/stp-nuclear-operating-texas-ag-breach-notice-1175-people.md)

official filing (Texas Attorney General breach report posted Oct 28, as reported by the San Antonio Express-News and breach-notice trackers); cause not stated; NRC says plant operating safely

2026-10-31

### Operator of the South Texas Project nuclear plant reports a data breach affecting about 1,175 people

**STP Nuclear Operating Co.**, the nonprofit that runs the South Texas Project Electric Generating Station near Bay City, filed a data security incident notice that the **Texas Attorney General** posted on **Oct 28**.

- **Who:** 1,175 people in total, 1,173 of them Texans, per the filing as reproduced by breach-notice trackers.
- **What:** names, Social Security numbers, dates of birth and "other" information. People were notified by email.
- **When:** the filing lists Sep 28 to 29 as the incident window and Sep 29 as the discovery date.
- **Plant systems:** the notice doesn't say whether operating or safety systems were affected. A Nuclear Regulatory Commission spokeswoman told the San Antonio Express-News the agency "remains satisfied" the plant continues operating safely and securely.

The filing doesn't say how it happened, and STP and its owners (CPS Energy, Austin Energy and Constellation) hadn't responded to the paper's questions. There's no ransomware claim tied to it in what we read.

Sources: [San Antonio Express-News via GovTech (Oct 30)](https://www.govtech.com/security/data-breach-hits-operator-of-south-texas-nuclear-power-plant) · [Breach record built from the Texas AG filing](https://breachrecord.com/breach/stp-nuclear-operating-2026-10/)