Capitol Pain Institute Data Breach Exposes Patient Information in Multi-State Cybersecurity Incident Class action law firm Shamis & Gentile P.A. is investigating a data breach at Capitol Pain Institute, a multi-state medical practice specializing in chronic pain management. The incident, reported to the U.S. Department of Health and Human Services (HHS) on May 1, 2026, compromised sensitive personally identifiable information (PII) of 695 patients across the U.S. Capitol Pain Institute, founded in 2007, operates clinics in Texas, Colorado, Indiana, Kentucky, and Ohio, offering services such as advanced pain procedures, medication management, physical therapy, and behavioral health support. While the breach notification confirmed the exposure of patient data, specific details about the types of compromised information beyond PII have not been publicly disclosed. Affected individuals may be eligible for compensation as part of an ongoing class action lawsuit investigation. The firm is reviewing claims from those who received breach notifications to determine legal options. The full scope and cause of the incident remain under examination.