Optalis Management Solutions Discloses 2025 Data Breach Affecting Senior Care Facilities
Optalis Management Solutions, the operator of the Optalis Health & Rehabilitation network of senior care facilities, revealed a data breach involving unauthorized access to its systems in April 2025. The intrusion occurred between April 14 and April 19, during which an unauthorized party accessed and exfiltrated personal information from the company’s network.
An investigation, conducted with external cybersecurity experts, concluded on June 10, 2026 over 13 months after the breach. The review determined that exposed data included full names alongside sensitive details such as Social Security numbers, driver’s license or state ID numbers, financial account information, medical treatment records, health insurance policy numbers, and in some cases, credit or debit card data. The breach encompassed both personally identifiable information (PII) and protected health information (PHI), though the total number of affected individuals nationwide was not disclosed.
The company reported the incident to the Massachusetts Office of Consumer Affairs and Business Regulation on June 29, 2026, identifying 20 Massachusetts residents as impacted. Written notifications were sent to affected individuals starting the same day, with a public notice posted on Optalis’ website.
In response, Optalis is offering complimentary identity theft protection services through IDX, including credit monitoring, a $1 million insurance reimbursement policy, and identity recovery assistance. Affected individuals received enrollment instructions with a September 25, 2026, deadline. The company also established a dedicated toll-free response line for inquiries related to the breach. Additionally, Optalis stated it is reviewing and updating its security practices to prevent future incidents.
Source: https://www.claimdepot.com/data-breach/optalis-2026
Optalis Health & Rehabilitation Centers cybersecurity rating report: https://www.rankiteo.com/company/optalishealthcare
"id": "OPT1782858575",
"linkid": "optalishealthcare",
"type": "Breach",
"date": "4/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '20 (Massachusetts residents '
'only, total undisclosed)',
'industry': 'Senior Care/Healthcare',
'location': 'Nationwide (U.S.)',
'name': 'Optalis Management Solutions',
'type': 'Healthcare Operator'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Complimentary identity theft protection services '
'through IDX, including credit monitoring, $1 million '
'insurance reimbursement policy, and identity recovery '
'assistance. Enrollment deadline: September 25, 2026.',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Social Security numbers',
'Driver’s license or state ID '
'numbers',
'Financial account information',
'Medical treatment records',
'Health insurance policy numbers',
'Credit or debit card data']},
'date_detected': '2025-04-19',
'date_publicly_disclosed': '2026-06-29',
'date_resolved': '2026-06-10',
'description': 'Optalis Management Solutions, the operator of the Optalis '
'Health & Rehabilitation network of senior care facilities, '
'revealed a data breach involving unauthorized access to its '
'systems in April 2025. The intrusion occurred between April '
'14 and April 19, during which an unauthorized party accessed '
'and exfiltrated personal information from the company’s '
'network.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Concluded',
'post_incident_analysis': {'corrective_actions': 'Reviewing and updating '
'security practices'},
'references': [{'source': 'Optalis Management Solutions Public Notice'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to '
'Massachusetts Office '
'of Consumer Affairs '
'and Business '
'Regulation'},
'response': {'communication_strategy': 'Written notifications to affected '
'individuals, public notice on '
'website, dedicated toll-free response '
'line',
'remediation_measures': 'Reviewing and updating security '
'practices',
'third_party_assistance': 'External cybersecurity experts'},
'title': 'Optalis Management Solutions Data Breach Affecting Senior Care '
'Facilities',
'type': 'Data Breach'}