On Demand Occupational Medicine Data Breach: A Ransomware Claim, Not Yet a Lawsuit
Reference Guide
On September 10, 2026 the ransomware group Wallstreet named On Demand Occupational Medicine, an Austintown, Ohio drug-testing and occupational health provider, on its leak site. As of October 18, 2026 the company has not publicly confirmed a breach, no regulator filing with a number of affected people has surfaced, and we found no filed lawsuit. There is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Has Actually Been Reported
On Demand Occupational Medicine started in 2008 as On Demand Drug Testing. It now serves employers, individuals and schools with drug screens, DOT physicals, immediate care and other workplace health services, and says it works nationwide through a network of clinics, collection sites and labs. In 2023 it processed nearly 22,000 drug screens, according to a local business-press report.
On September 10, 2026 the ransomware group Wallstreet listed the company on its leak site. Threat-intelligence trackers recorded the listing that day; one dates it to September 11. The group’s posted statement threatened that “the full leak will be published soon” unless the company made contact.
That is a claim by criminals, not a finding. The listing does not say how many people were involved or what kinds of data were taken, and trackers list the leak size as unknown. A leak-site posting proves the group named the company; it does not prove data was actually stolen.
Case details
We found no filed lawsuit. As of October 18, 2026 our federal court database shows no case naming On Demand Occupational Medicine, and we found no report of one in state or federal court. What exists is a lawyer-marketing “investigation” page published September 10, 2026, asking current and former staff and employees of the company’s client businesses to come forward. An investigation is an ad for plaintiffs, not a case: there is no court, no case number and no judge. One limit on our check: a national docket search was unavailable on the day we looked, so a very new filing could be missing. If a complaint is filed, this page will add the court and case number.
Status: Unconfirmed Breach, No Lawsuit, No Settlement
That can change quickly. Healthcare providers that confirm a breach must notify affected people by letter, and those notices usually trigger the first class actions. Until a letter or filing exists, nobody can tell you whether your records were in this incident.
Who Could Be Affected
If the claim turns out to be real, the people most likely to be in the data are those whose records the company holds: job applicants and employees sent for pre-employment, random or post-accident drug tests, people who had DOT or other physicals, immediate-care patients, students tested through school programs, and the company’s own staff. Many of these people never chose On Demand themselves — their employer or school did.
The local press reported the company serving over 30,000 individuals in Austintown and another 8,000 on-site in the region. That is a picture of its reach, not a count of breach victims; no count has been published.
The practical test is your mail. A genuine notice letter will name the company, say which of your details were involved, and usually offer free credit monitoring. Keep it if it arrives.
Is There Any Money?
Data breach settlements, when they happen, typically come years after the breach and usually combine reimbursement for documented losses, a small flat payment and credit monitoring. Amounts vary widely by case and class size. For figures from cases that actually paid, see our data breach settlement calculator; for settlements open right now, see open class action settlements.
On Demand Occupational Medicine Breach Timeline
2008 — The Company Starts as On Demand Drug Testing
The Austintown business begins with drug screening and later grows into a full occupational health provider serving clients in Ohio, West Virginia and Pennsylvania.
September 10, 2026 — Wallstreet Names the Company
The ransomware group lists On Demand Occupational Medicine on its leak site and threatens to publish data unless the company makes contact. It gives no size or data types.
September 10, 2026 — Lawyer Investigation Pages Appear
Plaintiff-side lawyers start soliciting staff and client employees the same day. No lawsuit is filed.
September 11, 2026 — Trackers Record the Listing
Breach-tracking sites log the claim and list the leak size as unknown. The company does not publicly confirm it.
As of October 18, 2026 — No Notice, No Lawsuit
We found no company notice, no regulator filing with an affected-people count, no filed case and no settlement.
Three Things to Watch For
A ransomware listing with sensitive drug-test and medical records, and no official notice yet, is the gap scammers use:
“Claim your On Demand settlement” pages
There is no settlement and no claims portal. Any site asking for your Social Security number or bank details to “secure your payment” is collecting data, not filing a claim.
Messages threatening to expose your drug test
Criminals sometimes contact individuals after a leak-site listing, claiming to hold their results or medical records and demanding payment. Do not pay or reply. Report it to the FBI’s IC3 and keep the message.
Calls posing as your employer or the clinic
Because your employer sent you for testing, a caller can sound informed by naming the company or a job site. A genuine breach notice comes by mail and does not ask for your full Social Security number or a fee by phone.
On Demand Occupational Medicine Breach — Questions People Ask
Short answers to the questions people ask most about this case.
Is there an On Demand Occupational Medicine data breach lawsuit?
Not that we could find as of October 18, 2026. There are only lawyer-marketing “investigation” pages. No complaint, court or case number has been reported, and our federal court database shows no case naming the company.
Did On Demand Occupational Medicine actually have a data breach?
It is not confirmed. On September 10, 2026 the Wallstreet ransomware group claimed it on its leak site. The company has not publicly confirmed it, and a leak-site listing alone does not prove data was taken.
What data was exposed?
Unknown. The listing names no data types and trackers list the leak size as unknown. Given what the company does, records could include identity details and drug-test or physical results, but that is not established. A genuine notice letter would tell you which of your details were involved.
How many people were affected?
No number has been published. We found no filing with a state attorney general or the federal health-breach portal. The company’s reported reach — nearly 22,000 drug screens in 2023 — describes its business, not a breach count.
How much money can you get from a data breach lawsuit?
From this incident, nothing as of October 18, 2026: there is no lawsuit, settlement or fund. In other cases, payouts depend on the settlement terms and how many people file. Our data breach settlement calculator shows what resolved cases have paid.
Can you sue for a healthcare data breach?
People do file class actions over healthcare breaches, usually after the provider confirms the breach and mails notices. For an example at the earliest stage, see the American Board of Preventive Medicine data breach lawsuit. Here, no confirmation and no notice exist yet.
Do I need to sign up somewhere to be included?
No. If a class action is ever filed and settles, a court-appointed administrator notifies class members. Lawyer “investigation” forms are marketing, not registration, and you do not need to fill one out to stay eligible for a future settlement.
What is worth doing right now?
Freeze your credit at the three bureaus — it is free and reversible. Watch your health insurance statements for care you did not receive. Treat any email or text about your drug test results with suspicion, and keep any notice letter that arrives.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Data Breach Settlement CalculatorWhat breach settlements have actually paid per person
- Class Action Payout CalculatorHow a settlement fund turns into a per-person check
- ABPM Data Breach LawsuitAnother medical-sector breach, with a filed federal case