Parexel International Data Breach

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Parexel data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident, including those who received notice of the Parexel data breach or otherwise believe they are affected.

Parexel International, LLC is notifying individuals affected by a data breach involving a third-party vendor, where unauthorized access to company files occurred. Based in Raleigh, North Carolina, Parexel is a clinical research organization that provides services to the life sciences industry. The issue came to light on October 4, 2025, when suspicious activity was detected in Parexel’s Oracle OCI E-Business Suite (Oracle EBS) environment. A zero-day (i.e., unknown) vulnerability in Oracle’s cloud infrastructure was identified and announced by Oracle the following day. Paraxel is just one of many Oracle customers believed to be affected by the cyberattack.

Files potentially exposed in the Paraxel data breach include personal information such as names, dates of birth, financial account and payment card numbers, Social Security numbers and national IDs provided for employment purposes. The incident was limited to the vendor's environment, and Parexel's own systems remained secure.

If your information was exposed in the Parexel data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Parexel to ensure they take proper steps to protect the information they were entrusted with.