Almeida Law Group is investigating a data breach at Optalis Management Solutions. If you were affected, contact Almeida Law Group.
About Optalis Management Solutions
Optalis Management Solutions is a private development and operations management company headquartered in Novi, Michigan. It is the management company behind the Optalis Health & Rehabilitation network, which provides post-hospital rehabilitation, skilled nursing, assisted living, memory care, and long-term care services across more than 30 communities in Michigan and Ohio. Because the company operates in the senior living and post-acute healthcare space, it handles a broad range of sensitive personal, financial, and medical information on behalf of the individuals in its care.
What Happened?
Optalis Management Solutions was listed in a HHS Office for Civil Rights breach portal report submitted on June 29th, 2026. The incident is classified as a hacking/IT incident affecting a network server. A total of 13,723 individuals were affected, and the company sent notification letters to affected individuals on or about June 29th, 2026.
According to the company’s own breach notification, unauthorized access to Optalis Management Solutions’ network occurred between April 14th, 2025 and April 19th, 2025. During that window, an unauthorized party accessed and removed personal information from the company’s systems. Optalis engaged outside cybersecurity professionals to investigate. The investigation and document review did not conclude until June 10th, 2026 — more than 13 months after the breach first occurred — before notifications were sent. The data exposed includes names, Social Security numbers, driver’s license or state identification numbers, credit or debit card information, financial account information, medical treatment and diagnosis information, and health insurance policy numbers.
As of late June 2026, attorneys at ClassAction.org (working with Bryson Harris Suciu & DeMay PLLC) and Shamis & Gentile P.A. are investigating the breach for a potential class action lawsuit, though no filed complaint has been confirmed.
Key Facts at a Glance
- Company or Organization: Optalis Management Solutions
- Industry: Senior living and post-acute healthcare management (skilled nursing, rehabilitation, assisted living, memory care)
- Location: Novi, Michigan, with facilities in Michigan and Ohio
- Incident type: Hacking/IT Incident — Network Server
- Date of breach: April 14th, 2025
- Date of consumer notification: June 29th, 2026
- Total persons affected: 13,723
- Identity theft protection offered: Yes — complimentary IDX services including credit monitoring, CyberScan monitoring, a $1 million insurance reimbursement policy, and managed identity recovery services
- Enrollment deadline: September 25th, 2026
- Litigation status: Under investigation by multiple law firms for a potential class action; no filed complaint confirmed as of late June 2026
- Source: HHS Office for Civil Rights breach portal report; ClassAction.org; ClaimDepot; Optalis Official Breach Notice
What Should You Do?
If you received a notification letter from Optalis Management Solutions, enroll in the complimentary IDX identity protection services before the September 25th, 2026 deadline. Because the exposed data includes Social Security numbers, financial account information, and medical information, you should also consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your credit reports at AnnualCreditReport.com. Watch your financial accounts closely for unauthorized transactions. Because health and medical information was involved, review your Explanation of Benefits statements and request copies of your medical records to check for any services you did not receive. If you spot signs of fraud or identity theft, report them at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
