Oculus Pathology Data Breach Exposes Sensitive Patient and Financial Information Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving Oculus Pathology, a Texas-based anatomic and clinical pathology provider. The breach may have exposed personally identifiable information (PII) and protected health information (PHI) of affected individuals, potentially making them eligible for compensation. About Oculus Pathology Founded in 1948 and headquartered in Austin, Texas, Oculus Pathology operates under its current name after previously being known as Clinical Pathology Associates. The company serves hospitals, surgery centers, and healthcare providers across Texas, Oklahoma, Nevada, Arizona, and Louisiana, processing over 100,000 samples annually with a team of more than 40 board-certified pathologists. The Breach On April 1, 2026, Oculus Pathology detected suspicious activity in an employee email account. After securing its systems, the company launched an investigation with third-party cybersecurity experts, confirming that unauthorized access occurred between March 31 and April 2, 2026. The compromised accounts contained sensitive data belonging to certain individuals. Exposed Information The breach potentially exposed a wide range of sensitive data, including: - Personal identifiers: Names, dates of birth, Social Security numbers, driver’s license/state ID numbers, and tax identification numbers. - Financial data: Bank account numbers, payment card details (with or without access credentials). - Health information: Medical diagnoses, treatment details, procedure records, health insurance policy/group numbers, Medicare numbers, prescription information, and patient IDs. The incident highlights the risks of email-based cyberattacks in the healthcare sector, where highly sensitive data remains a prime target for threat actors. Investigations into the breach’s full scope and impact are ongoing.