November 6, 2026: Urologic Specialists of Oklahoma said an unauthorized party accessed its network around October 2. Files with names, Social Security numbers, driver's license numbers and medical information may have been accessed. Letters to affected patients start on November 13. The practice has not said how many people are affected. See the Urologic Specialists of Oklahoma breach record.
The Tulsa-area urology practice posted a web notice dated November 6 (PDF). Outside specialists finished reviewing the affected files on October 19. The practice says it has no evidence of identity theft linked to the incident so far.
Lawsuits came before the notice. FOX23 reported on October 30 that the practice and ONEOK had been named in lawsuits over alleged data breaches. ONEOK is a different company with a separate incident.
What happened in the Urologic Specialists of Oklahoma data breach?
The practice found unauthorized activity on its network on or about October 2, 2026. It brought in outside specialists, who completed their review of what may have been accessed on October 19.
The notice does not say how the attacker got in. No ransomware group has been named, and the practice has not said whether any medical equipment was affected. It says it has taken steps to reduce the chance of a repeat, but it does not describe them.
What data was exposed?
Names were in the files. Depending on the person, the files may also include:
- Social Security number
- Date of birth
- Home or email address and phone number
- Driver's license number
- Medical information and health information
The practice says not every person had every type of data. The notice does not break "medical information" down into details such as diagnoses, prescriptions or insurance numbers.
The mix of Social Security numbers and health data is what makes this serious. Together they can be used for medical identity theft, tax fraud and opening new credit in a patient's name.
Who is affected?
Anyone whose information was stored on the practice's network may be affected. That can include current and former patients. The notice does not mention staff records.
Patients will receive letters starting November 13, 2026. The notice does not limit the incident to Oklahoma residents, so former patients who have moved away may also hear from the practice. Other incidents involving the practice are tracked on the Urologic Specialists of Oklahoma company page.
How does this compare with other healthcare breaches?
Clinic breaches often combine Social Security numbers with health data. In November, hearing care provider Amplifon reported a breach affecting 1,332,826 people in the US. In June, cardiac monitoring company iRhythm disclosed a patient data breach that later appeared in Texas and South Carolina filings covering 368,173 people.
Urologic Specialists of Oklahoma has not published a figure like these. The total may become clearer once letters go out and state or federal filings appear.
What should Urologic Specialists of Oklahoma patients do?
- Keep your letter. Watch for mail from the practice starting November 13 and compare later messages with it.
- Use the help line. Call 1-833-918-5975, Monday to Friday, 8 a.m. to 8 p.m. Central, and give engagement number B175746.
- Freeze your credit. Place a free freeze with Equifax, Experian and TransUnion, since Social Security numbers may be involved.
- Check insurance statements. Read explanation-of-benefits mail for treatments or prescriptions you do not recognize.
- Verify contacts. Be cautious of calls or emails asking for your Medicare number or card details, and check them against urologicspecialists.com.
Frequently asked questions
How many people were affected by the Urologic Specialists of Oklahoma breach?
The practice has not said how many people are affected. Its November 6, 2026 web notice describes the types of data involved but gives no total. Letters to affected patients start on November 13, and a figure may appear later in state or federal filings.
Were Social Security numbers exposed?
For some patients, yes. The notice lists Social Security numbers among the types of data that may have been in the affected files, along with driver's license numbers and health information. The practice says not every person had every type of data in those files.
When did the breach happen?
The practice found unauthorized activity on its network on or about October 2, 2026. Outside specialists finished reviewing the affected files on October 19. The practice posted its web notice on November 6 and planned to start mailing letters to patients on November 13.
Is this connected to the ONEOK lawsuit?
No. FOX23 reported on October 30 that lawsuits had been filed against both Urologic Specialists of Oklahoma and ONEOK over alleged data breaches. The two are different organizations with separate incidents. The practice's own web notice is the official source for what happened to patient data.