WiredScore, the New York-based organization behind the WiredScore and SmartScore building certification programs, has disclosed a data security incident involving personal information belonging to certain individuals. The company reported the breach to the Texas Attorney General’s office, confirming that names, addresses, and other personal data were involved.
Companies that collect and store personal information, whether from employees, clients, or certification program participants, have a legal and ethical responsibility to safeguard that data. When a breach occurs, timely and transparent disclosure is essential so that affected individuals can take steps to protect themselves.
WiredScore’s Data Breach Investigation
According to a filing with the Texas Attorney General’s office, WiredScore reported that a data security incident resulted in the unauthorized exposure of personal information belonging to at least 735 Texas residents. The filing indicates that the compromised data included individuals’ names, addresses, and other unspecified personal information. As of the filing date, WiredScore indicated that direct notice had not yet been provided to affected consumers, meaning many individuals whose information was involved may not yet be aware their data was exposed.
Data breaches involving corporate service providers like WiredScore are increasingly common as companies across industries rely on interconnected networks, vendors, and cloud-based systems to manage day-to-day operations. Even organizations that are not primarily consumer-facing, such as building certification and technology-rating firms, routinely maintain databases containing personal information about employees, clients, building owners, and program participants, making them attractive targets for cybercriminals seeking to harvest personal data for resale or identity theft schemes.
When a breach exposes a combination of names and addresses, the risk to affected individuals typically comes less from direct financial account takeover and more from the potential for targeted phishing, mail fraud, and identity-verification scams. Fraudsters often combine breached name-and-address data with information gathered from other sources to build convincing profiles used to trick victims into revealing more sensitive information, such as Social Security numbers or financial account details, in follow-up scams.
Because the specific circumstances of the incident, including how the breach occurred and the exact scope of information exposed beyond what was filed with the Texas Attorney General, have not been fully detailed in the public record, individuals affected by this incident should closely monitor any communications from WiredScore and remain alert for suspicious contact referencing this breach. It is not uncommon for the full extent of a breach, including the precise notification timeline promised to consumers, to become clearer only as an investigation progresses and regulatory filings are updated.
Notification timelines for data breaches vary significantly from state to state, and companies are generally required to notify affected residents within a specific window after discovering an incident, often ranging from thirty to ninety days depending on the jurisdiction. A filing that indicates consumer notice has not yet been provided does not necessarily mean the company has failed to meet its legal obligations, but it does mean that individuals whose information may have been compromised should not wait for a formal letter before taking protective steps. Waiting for direct notification can leave a gap during which exposed personal information is already circulating and available for misuse.
For organizations operating in the commercial real estate and building certification space, a breach can carry consequences beyond the individuals whose personal data was exposed. Building owners, property managers, and corporate clients who share data with certification providers as part of the application and audit process may also want to understand what safeguards were in place and what steps are being taken to prevent a recurrence. Transparency about the scope of an incident, including a clear accounting of exactly which data elements were accessed, is an important part of rebuilding trust after a breach of this nature.
When Did This Breach Occur?
WiredScore’s breach was reported to the Texas Attorney General’s office with a filing date of August 22, 2025. The exact date the underlying security incident occurred, and when WiredScore first detected it, have not been publicly disclosed in the available filing. Notice to affected consumers had not yet been confirmed as provided as of the filing date.
What Information Was Breached?
Based on the information provided to the Texas Attorney General, the breach involved individuals’ names, addresses, and other unspecified personal information. WiredScore has not publicly disclosed a complete, itemized list of every data type involved, and it is not yet confirmed whether more sensitive categories of information, such as Social Security numbers or financial account details, were part of the exposure.
What You Can Do
If you believe you may have been affected by the WiredScore data breach, consider taking the following steps to protect yourself:
- Monitor your mail, email, and phone for any communication from WiredScore regarding this incident.
- Watch for phishing attempts, including emails, texts, or calls asking you to verify personal information.
- Review your financial account statements and credit reports regularly for unfamiliar activity.
- Consider placing a fraud alert or credit freeze with the major credit bureaus if you notice suspicious activity.
- Keep records of any suspicious contact or unauthorized activity you discover.
File a Data Breach Lawsuit Against WiredScore
If your personal information was exposed in the WiredScore data breach, you may be entitled to compensation. Companies that fail to adequately protect the personal data entrusted to them can be held legally accountable for the resulting harm to affected individuals.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
