Excelas Data Breach

Excelas, operating under Ocelot Ventures, has disclosed a data breach involving unauthorized access to its computer systems. The breach exposed sensitive personal and medical information of individuals. Excelas provides medical-legal solutions for the defense in long-term and acute care claims, litigation, and audits. The company is offering guidance on how affected individuals can protect their data and is taking steps to prevent future incidents.

Excelas Data Breach Investigation

On January 28, 2026, Excelas detected suspicious network activity, which prompted an immediate investigation into its computer systems. With the assistance of third-party cybersecurity specialists, the company determined that an unauthorized actor accessed its systems between November 27 and December 3, 2025. The investigation revealed that the breached data involved sensitive personal and medical information.

The compromised data includes personal identifiers such as names, dates of birth, Social Security numbers, government-issued IDs, medical information, diagnosis records, medication details, medical images, insurance details, and payment information. Excelas has notified the potentially impacted individuals and is taking action to strengthen its systems to prevent similar incidents in the future.

When Did This Breach Occur?

The breach occurred between November 27 and December 3, 2025, but Excelas did not detect the suspicious activity until January 28, 2026. The company began notifying affected individuals shortly after the investigation concluded.

What Information Was Breached?

The following personal information may have been exposed in the breach:

• Name
• Date of birth
• Social Security number
• Government-issued ID
• Medical and diagnosis information
• Medication details
• Medical record images
• Insurance information
• Payment details

What You Can Do

If you were affected by the Excelas breach, here are important steps you can take to protect your personal and medical information:

1. Monitor Your Accounts: Regularly review your financial statements, medical records, and credit reports for any suspicious activity. If you notice anything unusual, report it immediately to your financial institution or medical provider.
2. Place a Fraud Alert or Security Freeze: Consider placing a fraud alert or security freeze on your credit file with the three major credit bureaus—Equifax, Experian, and TransUnion. A fraud alert will notify creditors to verify your identity before extending credit, while a security freeze restricts access to your credit report.
3. Enroll in Identity Protection Services: If Excelas is offering identity protection or credit monitoring services, be sure to enroll. These services can help detect fraud early and offer assistance if your information is misused.
4. Obtain Free Credit Reports: You are entitled to one free credit report each year from each of the three major credit bureaus. Visit AnnualCreditReport.com to obtain your reports and monitor for any discrepancies.
5. File a Police Report: If you notice any fraudulent activity, you can file a police report. This will assist in resolving any identity theft issues and protecting your rights.

File a Data Breach Lawsuit Against Excelas

If you have been affected by the Excelas data breach, you may be entitled to compensation through a class action lawsuit. While Excelas is offering guidance and identity protection services, those who have experienced financial harm or identity theft may still have grounds for legal action.

At Class Action U, we can help you connect with skilled attorneys who specialize in class action lawsuits. Contact us for a free consultation to determine if you have a case and explore your legal options.