Oculus Pathology

Oculus Pathology's breach notice covers a three-day window, March 31 to April 2, 2026, of unauthorized access to employee email accounts. Inside that window, 20,040 patients had names, Social Security numbers, driver's license numbers, tax IDs, payment card data, and full clinical records, diagnosis through prescription, exposed. One inbox held identity, finance, and medical history all at once, because nothing segregated them. A single email account eviscerated the entire catalog of the security tools deployed around it.