Optalis Management Solutions Data Breach Exposes Social Security Numbers

Optalis Management Solutions, the management company behind the Optalis Health & Rehabilitation network of senior care facilities, disclosed a data breach involving unauthorized access to its computer network in April 2025.

Between April 14 and April 19, 2025, unauthorized access to the Optalis Management Solutions network occurred. During this time, an unauthorized party accessed the company's systems and removed a limited amount of personal information from the network.

After discovering the unauthorized access, Optalis Management Solutions launched an investigation in consultation with outside cybersecurity professionals who regularly investigate and analyze these types of incidents. The purpose of the investigation was to determine the full extent of any compromise to the information stored on the company's network.

The investigation and document review, which the company described as comprehensive, concluded on June 10, 2026, more than 13 months after the breach took place.

The investigation determined that the personal information removed from the network included full names and one or more of the following: Social Security numbers, driver's license or state identification numbers, credit or debit card information, financial account information, medical treatment and diagnosis information, and health insurance policy numbers.

The company disclosed the breach to the Massachusetts Office of Consumer Affairs and Business Regulation and posted a notice on its website with details about the incident.

The company began sending written notifications to affected individuals on or about June 29, 2026.

Optalis' response

Optalis Management Solutions is offering complimentary identity theft protection services through IDX, a data breach and recovery services provider.

Affected individuals received a personal enrollment code in their notification letter and can enroll by visiting the IDX enrollment website or by scanning a QR code included in the letter. The deadline to enroll is Sept. 25, 2026.

Individuals with questions about the breach can call a dedicated, confidential toll-free response line at 1-844-806-3780. The line is staffed with professionals familiar with the incident and is available Monday through Friday from 9 a.m. to 9 p.m. Eastern Time.