Next Level Medical Data Breach Exposes PHI and PII

Next Level Medical LLC, a Texas-based urgent care and primary care organization, disclosed a data breach involving sensitive personal and medical information.

The company detected suspicious activity in its computer environment in July 2026. Next Level Medical has since posted a notice on its website to alert potentially affected individuals while its review of the impacted files continues.

Next Level Medical first became aware of suspicious activity within its environment on July 11, 2026. The company then detected additional suspicious activity on July 29, 2026. In response, it launched an investigation with the assistance of third-party cybersecurity specialists.

Those specialists worked to bring the company's systems back online in a safe and secure manner. On Aug. 31, 2026, the investigation determined that an unauthorized actor had copied certain files from the company's environment during the breach.

Before the company reached that determination, a ransomware group known as Pear had already claimed responsibility for the attack. On Aug. 26, 2026, the group posted its claim on the dark web. The group stated it had obtained three terabytes of data belonging to the organization.

The types of information exposed may vary by individual but may include names, Social Security numbers, dates of birth, medical information, health insurance information and other demographic information.

The company stated that it is still conducting an extensive review of the affected files to determine what information was present and to whom it relates.

Next Level Medical's response to the breach

The company encouraged potentially impacted individuals to remain vigilant against incidents of identity theft and fraud.

Next Level Medical has set up a dedicated assistance line for individuals who have questions about this event. The line can be reached at 877-383-0533, Monday through Friday from 9 a.m. to 5 p.m. CST.