Innovative Scientific Solutions, operating as Luxor Scientific, experienced a data breach where an unauthorized third party gained access to its computer network on or around September 6, 2025. The company detected the incident at that time and conducted a forensic investigation, determining on March 31, 2026, that personal information had been compromised. Notifications were mailed to affected individuals starting April 7, 2026, and notice was also provided through print media and the company website around April 22, 2026.
The breach exposed sensitive personal and medical data for 18,301 individuals. This data includes Social Security numbers, driver's license numbers, full names, dates of birth, financial account and credit/debit card information, health insurance policy and subscriber numbers, medical history, conditions, treatments, diagnoses, prescription information, dates of service, and telephone numbers. The company has stated it contained the threat and has no evidence of misuse of the information as a direct result of this incident.
Details about what led to the unauthorized access have not been publicly confirmed by the company. Further information may emerge as investigations continue.