Evoke Wellness at Hilliard Data Breach: SSNs Exposed
By Join The Case · Published December 17, 2025 · Updated December 17, 2025 · 7 min read
File Your Claim Now

Dapeer Law, P.A., a top-rated class action law firm, is investigating the Evoke Wellness at Hilliard data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

See Featured Articles
Petco Data Breach Affects Subscriber Privacy Petco Data Breach Affects Subscriber Privacy Were you hired to help train AI models? Were you hired to help train AI models? Received a Parking Ticket Notice in the Mail from Parking Revenue Recovery Services? Received a Parking Ticket Notice in the Mail from Parking Revenue Recovery Services? The Washington Post Data Breach: SSNs Exposed The Washington Post Data Breach: SSNs Exposed Late-Night and Early-Morning Unwanted Text Messages Late-Night and Early-Morning Unwanted Text Messages

Evoke Wellness at Hilliard Data Breach Lawsuit Investigation

On September 26, 2025, patients of Evoke Wellness at Hilliard began receiving letters about a security incident that exposed sensitive personal and medical data. If you were notified, you could be entitled to compensation and complimentary identity-protection services—start your free case review today.

Key Takeaways

  • Incident discovered by law enforcement: May 20, 2025
  • Consumer notifications mailed: September 26, 2025
  • Records reported to Massachusetts Attorney General: 2 individuals
  • Total individuals affected: 2
  • Complimentary 18-month TransUnion credit monitoring offered via Cyberscout
Download Official Breach Notice (PDF)

What Happened?

OCAT, LLC dba Evoke Wellness at Hilliard (“Evoke Wellness at Hilliard”) learned from law enforcement on May 20, 2025, that information from its systems was found in the possession of an unauthorized individual. The individual, a former employee terminated in July 2024, is now facing criminal charges that include counterfeiting, forgery, and identity theft.

Evoke Wellness at Hilliard immediately launched an internal investigation and continues to cooperate with law enforcement authorities.

What Information Was Exposed?

The investigation determined that the following data elements could have been accessed without authorization:

  • Name, physical and email address, phone number
  • Date of birth and Social Security number
  • Driver’s license/state ID and passport number
  • Medical record number, admission and discharge dates
  • Diagnosis details (e.g., discharge type, sobriety date, allergies)
  • Medication, pharmacy, lab results, and health-insurance information
  • Payment card data
  • Photograph and handwritten/e-signature
  • Marital status, employer, race/ethnicity

Company Response

According to the notice, Evoke Wellness at Hilliard:

  • Launched an internal investigation and is working with law enforcement
  • Terminated the individual involved (July 2024)
  • Is evaluating additional security enhancements
  • Arranged 18 months of complimentary TransUnion credit monitoring, credit reports, credit scores, and proactive fraud assistance through Cyberscout

Steps You Can Take

Eligible recipients can activate the free monitoring by visiting bfs.cyberscout.com/activate and enrolling within 90 days of the letter date. You will need your unique activation code, an internet connection, and basic personal information to verify identity.

Regardless of whether you enroll, remain vigilant:

  • Review account statements and credit reports for unfamiliar activity
  • Place fraud alerts or security freezes if needed
  • Report suspected identity theft to law enforcement immediately

Timeline of the Evoke Wellness at Hilliard Data Breach

  • May 20, 2025 – Law enforcement informs Evoke Wellness at Hilliard that patient data was found with an unauthorized individual.
  • July 17, 2025 – Initial notification letter issued to patients.
  • September 26, 2025 – Follow-up consumer notice letter mailed.
  • December 16, 2025 – Breach reported to Massachusetts Attorney General.

Company Overview

OCAT, LLC dba Evoke Wellness at Hilliard operates an addiction-treatment facility in Hilliard, Ohio.

Frequently Asked Questions

I received a data breach letter from Evoke Wellness at Hilliard — what should I do?

Follow the enrollment instructions in the letter to activate the free TransUnion credit-monitoring service within 90 days, monitor your accounts, and consider filing a legal claim.

How do I submit a claim related to the Evoke Wellness at Hilliard data breach?

You can request a free case evaluation through our site. Provide a copy of your notification letter and any evidence of fraud or out-of-pocket expenses.

What information did the Evoke Wellness at Hilliard breach expose?

Exposed data may include full name, contact details, Social Security number, driver’s license or passport number, extensive medical information, and payment card data.

Did Evoke Wellness at Hilliard offer credit monitoring, and for how long?

Yes. The facility is offering complimentary TransUnion credit monitoring, credit reports, and fraud-assistance services for 18 months.

How many people were affected by the Evoke Wellness at Hilliard breach?

The company reported the incident to the Massachusetts Attorney General with a total of 2 impacted individuals.

How can I get the official breach notice (PDF) for Evoke Wellness at Hilliard?

You can download it directly from the Massachusetts Attorney General’s website using the button above.

Attorney Advertising. Prior results do not guarantee a similar outcome.

File Your Claim Now