On Demand Occupational Medicine Data Breach Investigation

Written by 
Published on:
September 16, 2026
Updated on:
September 16, 2026

An Ohio occupational health provider is now the subject of a data breach investigation after a ransomware group publicly claimed responsibility for an attack on its systems.

On Demand Occupational Medicine, based in Austintown and known for drug testing, DOT physicals, and workplace health services across Northeast Ohio and nationally, was listed on a dark web leak site by a group calling itself Wallstreet in mid September 2026.

The company has not confirmed the incident. No notification letters have gone out publicly, and no specific data types have been verified as stolen. Everything reported so far comes from third party monitoring sources and the ransomware group's own claims, not from an official statement by On Demand Occupational Medicine.

What happened at On Demand Occupational Medicine?

  • Who: On Demand Occupational Medicine, an occupational health and drug testing provider serving employers, schools, and individuals
  • What: An alleged ransomware attack and data theft claim, unconfirmed by the company
  • When: The claim surfaced on a leak site around September 10 and 11, 2026
  • Where: The company operates out of Austintown, Ohio, with clients across the country
  • Why it matters: Occupational health providers hold sensitive records including Social Security numbers, medical histories, and drug testing results tied to workers and job applicants
  • How the claim surfaced: A ransomware group posted the company's name to its extortion site, a common tactic used to pressure victims into paying before any data is confirmed leaked

Because the company handles records for employers and individual patients, any confirmed breach could reach well beyond direct customers to workers referred through third party employers.

Until a formal notification arrives, people connected to the company should watch financial statements and save any communication referencing this incident.

Companies that store medical and identifying information carry a legal responsibility to secure it and to notify affected individuals within the timeframes set by state law. Whether On Demand Occupational Medicine met that responsibility is not yet known, and no wrongdoing has been established.

Contact Our Data Breach Attorneys

The Lyon Firm has spent more than two decades representing victims of healthcare and workplace data breaches across Ohio and nationally. Our attorneys track emerging breach claims like this one and are prepared to evaluate cases the moment a formal notification confirms what data was exposed.

If you receive a letter from On Demand Occupational Medicine or believe your information was involved, contact the data breach lawyers at The Lyon Firm for a free consultation to understand your legal options.

Contact Us

Request a Free Consultation

Taking the first step doesn’t have to be complicated. In just a few minutes, you can share the basics of your case, and our team will guide you from there:

  • It begins with a few simple questions about your situation.
  • From there, a member of our legal team reviews your case.
  • Together, we’ll chart the path forward, helping you take the next step toward resolution.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.