Excelas

Excelas operates under the alias Ocelot Ventures, LLC, indicating its status as a limited liability company. The organization is known by both names in public filings and breach notifications. No further details about its core business lines or market focus are disclosed in the available sources. The use of a dual naming convention suggests a possible branding or operational distinction between the public‑facing name and the legal entity.

Between November 27 and December 3, 2025, an unauthorized actor gained access to Excelas's information systems. The intrusion remained undetected until January 28, 2026, when internal security monitoring identified the breach. During the period of access, the attacker was able to exfiltrate datasets containing personal and medical information. The types of data compromised included identifiers such as names and contact details, as well as health‑related records. This exposure triggered the organization's incident response procedures once the breach was discovered.

Excelas issued notifications to affected individuals on May 12, 2026, informing them of the potential risk to their data. The breach prompted the engagement of Edelson Lechtzin LLP, which is conducting an investigation into the incident. The law firm’s involvement indicates that the organization is seeking legal counsel to address regulatory and liability concerns. No public statements have been made regarding the total number of records affected or the specific vulnerabilities exploited. The breach has been cited in press releases as a case study for the importance of timely detection and disclosure. The incident remains under review, with further updates expected as the investigation progresses.