Oculus Pathology, a physician-owned anatomic and clinical pathology company based in Austin, Texas, discovered suspicious activity related to an employee email account on April 1, 2026. The company secured its email system and network and launched an investigation with third-party cybersecurity experts. The investigation revealed that a limited number of employee email accounts were accessed without authorization between March 31 and April 2, 2026.
The compromised email accounts may have contained personally identifiable information (PII) and protected health information (PHI). Exposed data types include names, dates of birth, Social Security numbers, driver’s license or state identification numbers, taxpayer identification numbers, financial account numbers, payment card numbers, clinical information, provider names, health insurance policy numbers, health insurance group numbers, diagnosis information, treatment locations, procedure information, medical record numbers, Medicare numbers, patient IDs, and prescription information. The company stated it was not aware of evidence of fraudulent misuse.
Oculus Pathology began notifying potentially impacted individuals. The exact number of affected individuals and the specific states affected have not been publicly disclosed. Further details may emerge as the investigation continues and official notifications are processed.