Oculus Pathology Data Breach Exposes Sensitive Patient and Financial Information
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving Oculus Pathology, a Texas-based anatomic and clinical pathology provider. The breach may have exposed personally identifiable information (PII) and protected health information (PHI) of affected individuals, potentially making them eligible for compensation.
About Oculus Pathology
Founded in 1948 and headquartered in Austin, Texas, Oculus Pathology operates under its current name after previously being known as Clinical Pathology Associates. The company serves hospitals, surgery centers, and healthcare providers across Texas, Oklahoma, Nevada, Arizona, and Louisiana, processing over 100,000 samples annually with a team of more than 40 board-certified pathologists.
The Breach
On April 1, 2026, Oculus Pathology detected suspicious activity in an employee email account. After securing its systems, the company launched an investigation with third-party cybersecurity experts, confirming that unauthorized access occurred between March 31 and April 2, 2026. The compromised accounts contained sensitive data belonging to certain individuals.
Exposed Information
The breach potentially exposed a wide range of sensitive data, including:
- Personal identifiers: Names, dates of birth, Social Security numbers, driver’s license/state ID numbers, and tax identification numbers.
- Financial data: Bank account numbers, payment card details (with or without access credentials).
- Health information: Medical diagnoses, treatment details, procedure records, health insurance policy/group numbers, Medicare numbers, prescription information, and patient IDs.
The incident highlights the risks of email-based cyberattacks in the healthcare sector, where highly sensitive data remains a prime target for threat actors. Investigations into the breach’s full scope and impact are ongoing.
Source: https://www.claimdepot.com/investigations/oculus-pathology-data-breach-2026
Oculus Pathology cybersecurity rating report: https://www.rankiteo.com/company/oculus-pathology
"id": "OCU1786372683",
"linkid": "oculus-pathology",
"type": "Breach",
"date": "3/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Healthcare (Pathology Services)',
'location': 'Austin, Texas, USA',
'name': 'Oculus Pathology',
'size': '40+ board-certified pathologists, processes '
'over 100,000 samples annually',
'type': 'Healthcare Provider'}],
'attack_vector': 'Email-based cyberattack',
'data_breach': {'personally_identifiable_information': 'Names, dates of '
'birth, Social '
'Security numbers, '
'driver’s '
'license/state ID '
'numbers, tax '
'identification '
'numbers, bank account '
'numbers, payment card '
'details, health '
'insurance '
'policy/group numbers, '
'Medicare numbers, '
'prescription '
'information, patient '
'IDs',
'sensitivity_of_data': 'High (PII, PHI, financial data)',
'type_of_data_compromised': ['Personal identifiers',
'Financial data',
'Health information']},
'date_detected': '2026-04-01',
'description': 'Shamis & Gentile P.A. is investigating a cybersecurity '
'incident involving Oculus Pathology, a Texas-based anatomic '
'and clinical pathology provider. The breach may have exposed '
'personally identifiable information (PII) and protected '
'health information (PHI) of affected individuals.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential compensation claims',
'payment_information_risk': 'High',
'systems_affected': 'Employee email accounts'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Shamis & Gentile P.A.'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.'},
'response': {'containment_measures': 'Secured systems after detecting '
'suspicious activity',
'third_party_assistance': 'Third-party cybersecurity experts'},
'title': 'Oculus Pathology Data Breach Exposes Sensitive Patient and '
'Financial Information',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized access to employee email account'}