Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringTexas AG filing · September 15, 2026

Catalyst Physician Group Data Breach Exposes Patient Health Info

Catalyst Physician Group reported a data breach in 2026, revealing that sensitive patient information including full names, Social Security Numbers, and detailed medical records were compromised. Patients who received a notification letter about this incident may have legal options to seek accountability and compensation for the exposure of their private data.

This breach is real, not a scam. Catalyst Physician Group officially reported it to the Texas Attorney General on September 15, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Catalyst Physician Group notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Texas
Breach date
December 2, 2025
Reported
September 15, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates

Catalyst Physician Group, a healthcare provider based in Texas, announced a data breach affecting its systems. The incident, which reportedly occurred on December 2, 2025, was officially filed with authorities on September 15, 2026. Individuals who have received a data breach notification letter from Catalyst Physician Group should be aware that their personal information may have been compromised.

The exposed data includes highly sensitive personal and medical details. Specifically, the breach may have involved individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates.

The compromise of such extensive medical and personal information carries significant risks. Unlike a credit card that can be canceled, medical data and Social Security Numbers cannot be easily changed. This exposure can lead to severe consequences, including medical identity theft, fraudulent billing, unauthorized access to prescriptions, and various forms of financial identity theft that can persist for years.

As a healthcare entity, Catalyst Physician Group is bound by stringent regulations, including federal HIPAA laws and state-specific privacy acts in Texas, to protect patient data. A data breach of this nature raises serious questions about the adequacy of the security measures in place to safeguard this highly confidential information from unauthorized access.

If you received a data breach notification letter from Catalyst Physician Group, it confirms that your personal and protected health information was exposed. This notification establishes a basis for you to explore your legal rights, including participating in a potential class action lawsuit aimed at holding the responsible parties accountable and securing compensation or credit monitoring services for affected individuals.

We are currently monitoring the Catalyst Physician Group data breach. Individuals impacted by this incident may be entitled to legal recourse. We offer a free, no-obligation case review to help you understand your options.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Texas Attorney General filing

Related data breach cases