Excelas Data Breach Exposes Sensitive Medical and Personal Information
Shamis & Gentile P.A., a class action law firm, is investigating a data breach at Excelas, a Richmond Heights, Ohio-based provider of medical-legal solutions. The incident, discovered on January 28, 2026, involved unauthorized access to Excelas’ systems between November 27 and December 3, 2025.
Excelas, which serves healthcare organizations, insurers, and medical corporations, confirmed that cybercriminals accessed files containing sensitive personally identifiable information (PII) and protected health information (PHI). The exposed data includes names, Social Security numbers, medical records, insurance details, diagnosis information, and payment data.
The CL0P ransomware group claimed responsibility for the attack, publicly posting about the breach on the dark web on January 23, 2026. Excelas is working with cybersecurity experts and law enforcement to assess the full scope of the incident.
Affected individuals may be eligible for compensation under data protection laws, and legal investigations are underway to determine potential claims.
Source: https://www.claimdepot.com/investigations/excelas-data-breach-2026
Excelas cybersecurity rating report: https://www.rankiteo.com/company/excelas1
"id": "EXC1778862513",
"linkid": "excelas1",
"type": "Ransomware",
"date": "11/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare, Legal, Insurance',
'location': 'Richmond Heights, Ohio, USA',
'name': 'Excelas',
'type': 'Medical-Legal Solutions Provider'}],
'data_breach': {'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Medical records',
'Insurance details',
'Diagnosis '
'information',
'Payment data'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2026-01-28',
'date_publicly_disclosed': '2026-01-23',
'description': 'Shamis & Gentile P.A. is investigating a data breach at '
'Excelas, a provider of medical-legal solutions. The incident '
'involved unauthorized access to Excelas’ systems, exposing '
'sensitive personally identifiable information (PII) and '
'protected health information (PHI). The CL0P ransomware group '
'claimed responsibility for the attack.',
'impact': {'data_compromised': 'Sensitive personally identifiable information '
'(PII) and protected health information (PHI)',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'CL0P'},
'references': [{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Potential claims under data '
'protection laws'},
'response': {'law_enforcement_notified': 'Yes',
'third_party_assistance': 'Cybersecurity experts'},
'threat_actor': 'CL0P ransomware group',
'title': 'Excelas Data Breach Exposes Sensitive Medical and Personal '
'Information',
'type': 'Data Breach, Ransomware'}