Urologic Specialists of Oklahoma Data Breach Lawsuit Explained

The Urologic Specialists of Oklahoma data breach lawsuit explains reported legal action after an alleged data theft at the urology practice. Urologic Specialists of Oklahoma is a Tulsa-based urology practice, and attorneys are reviewing possible class-action claims tied to the incident.

The reports follow an Oct. 23, 2026 leak-site claim and lawsuits noted days later. For readers, the practical question is whether your information was involved and how to preserve your options.

Table of Contents

What happened?

On Oct. 23, 2026, the Everest ransomware group listed the practice on its leak site and claimed to have stolen data, according to Ahdoot & Wolfson in its Ahdoot & Wolfson investigation update. A leak-site listing is a public claim of theft. It is not itself proof of what was taken.

Tulsa station KTUL reported around Oct. 30, 2026 that Urologic Specialists of Oklahoma and energy company ONEOK faced lawsuits over alleged breaches, according to Spot On Oklahoma in its Spot On Oklahoma summary of KTUL reporting. The two matters involve different organizations. This article covers only the urology practice.

Who is involved?

Urologic Specialists of Oklahoma serves Oklahoma and Arkansas from clinics including Tulsa, Muskogee, Bartlesville, Owasso, McAlester and Fort Smith, according to the practice on its official clinic directory. That footprint matters because patients from several cities may have records in the same system.

Siri & Glimstad says the incident may have compromised names, contact details and other private records. The firm invites potentially affected people to complete a free eligibility check. Eligibility here means whether your records fall within the investigated incident.

Where does the case stand?

Ahdoot & Wolfson says it is investigating a possible class action against the practice. An investigation means lawyers are gathering facts and evaluating claims. It does not mean a court has ruled or approved compensation.

No payout, claim deadline, or settlement fund has been announced in the packet evidence. Readers should treat attorney intake pages as screening tools. Joining an investigation preserves contact, not payment.

What should you do now?

Oklahoma law adds a timing cue. Under Senate Bill 626 effective Jan.

1, 2026, entities with a breach affecting 500 or more residents must notify the Oklahoma Attorney General within 60 days, according to the Oklahoma Attorney General. A mailed notice may therefore arrive after the reported late-October events. Siri & Glimstad and Oklahoma complaint guidance point to three practical steps: Keep any letter in its original envelope and save a copy where you can find it.

  • Watch mail for a notification letter from the practice.
  • Monitor bank, medical, and credit statements for unfamiliar activity.
  • Preserve any notice and join an investigation only after saving it.

You Might Also Like

We use cookies to run this site, measure how it’s used, and show ads. Choose “Essentials only” to limit cookies to what the site needs to work. Privacy Policy.