Oculus Pathology Data Breach Exposes Social Security Numbers & Health Info

Austin, Texas headquartered, Oculus Pathology, disclosed a data breach involving unauthorized access to employee email accounts. The company provides diagnostic pathology services to hospitals, surgery centers and physician practices across several states.

On April 1, 2026, Oculus Pathology discovered suspicious activity related to an employee email account. The company then began working with third-party computer specialists to investigate the full nature and scope of the incident.

The investigation determined that a limited number of employee email accounts were subject to unauthorized access between March 31 and April 2, 2026. Following that finding, the company and its third-party specialists began what the notification described as a "comprehensive and time-consuming review" of the affected email accounts. The goal was to identify what types of information the accounts contained and which individuals were connected to that information.

The review found that the affected email accounts may have contained both personally identifiable information (PII) and protected health information (PHI). The PII that may have been exposed included names, dates of birth, Social Security numbers, driver's license or state identification numbers, individual tax identification numbers, financial account numbers with or without access information and payment card numbers with or without access information.

The PHI that may have been exposed included clinical information, provider names, health insurance policy numbers, health insurance group numbers, medical diagnosis information, treatment locations, procedure information, medical treatment and procedure information, medical record numbers, Medicare numbers, patient IDs and prescription information.

Oculus Pathology's response

Oculus Pathology posted a notice of the incident on its website and stated that its investigation into the data at risk remains ongoing. According to the notice, the company began notifying potentially impacted individuals after determining that the affected email accounts may have contained sensitive personal and medical information.

If the investigation reveals that a specific individual's information was impacted, the company will provide written notice directly to that person.

Oculus Pathology stated that it is "not aware of any evidence to suggest that any information has been fraudulently misused." The company described the notifications as being sent "in an abundance of caution."

Oculus Pathology has set up a toll-free call center to answer questions about the incident. Individuals can reach the call center at 1-800-405-6108, available Monday through Friday from 8 a.m. to 8 p.m. Eastern time.