Next Level Urgent Care operates a network of urgent care clinics across Texas, serving patients who trust the company with sensitive personal and medical information. In August 2026, reports emerged that the company may have suffered a cybersecurity incident affecting some of that data. Healthcare providers that collect and store protected health information have a legal and ethical responsibility to safeguard it against unauthorized access.
Next Level Urgent Care’s Data Breach Investigation
According to reports first circulated on dark web monitoring services in late August 2026, a hacker group calling itself PEAR claimed responsibility for breaching the systems of Next Level Medical, LLC, the entity that operates Next Level Urgent Care’s roughly 45 clinic locations throughout Texas. As of this writing, Next Level Urgent Care has not issued a public statement confirming the incident, and the exact volume and nature of any compromised data have not been disclosed.
Attorneys are currently investigating the reported breach to determine whether patients, staff, or other individuals connected to Next Level Urgent Care may have had their personal information exposed. Ransomware incidents affecting healthcare organizations have become increasingly common in recent years, as medical providers often store large volumes of highly sensitive information, including Social Security numbers, medical records, insurance details, and payment information, making them attractive targets for cybercriminals.
When a threat actor gains unauthorized access to a healthcare provider’s network, the consequences for affected individuals can extend well beyond the initial intrusion. Depending on what information is ultimately confirmed to have been accessed, patients and employees could face an elevated risk of identity theft, medical identity fraud, or targeted phishing attempts that exploit stolen personal details. Healthcare data is particularly valuable on illicit markets because it often cannot be changed the way a password or credit card number can, meaning the risks associated with exposure can persist for years.
Data breach notification laws generally require companies to investigate the scope of an incident and notify affected individuals and, in many cases, state regulators once the investigation is complete. Because Next Level Urgent Care has not yet confirmed the incident publicly, it remains unclear when or whether formal notifications will be sent, or what specific categories of information may have been involved. This page will be updated as more verified information becomes available.
When Did This Breach Occur?
Public reporting indicates that the underlying intrusion is believed to have occurred on or around August 24, 2026, with the ransomware group’s claim of responsibility surfacing on dark web monitoring platforms roughly two days later, on August 26, 2026. Next Level Urgent Care has not yet released an official timeline confirming when the incident began, when it was internally detected, or when any resulting notifications might be sent to affected individuals.
What Information Was Breached?
At this time, the specific categories of information that may have been accessed have not been publicly confirmed by Next Level Urgent Care or independently verified. Given that Next Level Urgent Care is a healthcare provider, information typically held by similar organizations can include patients’ names, Social Security numbers, dates of birth, insurance information, and medical records, along with employee personnel data. This page will be updated if and when official details about the specific data involved are released.
What You Can Do
If you are a current or former patient or employee of Next Level Urgent Care, there are steps you can take to help protect yourself while more information becomes available:
- Watch for any official notification letter from Next Level Urgent Care and keep it as proof you may have been affected.
- Monitor your financial accounts and insurance statements for unfamiliar activity.
- Consider placing a fraud alert or credit freeze with the major credit bureaus.
- Be cautious of unexpected calls, texts, or emails claiming to be from Next Level Urgent Care or your insurer, especially those asking for personal information.
- Regularly review your medical records and insurance explanation-of-benefits statements for services you did not receive.
File a Data Breach Lawsuit Against Next Level Urgent Care
If it is confirmed that your personal information was exposed as a result of this incident, you may have legal options available to seek compensation for any resulting harm. Companies that are entrusted with sensitive patient and employee data are expected to maintain reasonable safeguards to protect it, and a failure to do so can form the basis of a class action lawsuit.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
