Parexel International Data Breach – Investigated by Federman & Sherwood
Oklahoma City, Oklahoma (December 18, 2025) – Federman & Sherwood announces that it is investigating a data breach involving Parexel International, a global clinical research organization, following a notification filed with the Attorney General of Maine.
According to the notification, Parexel identified suspicious activity on or about October 4, 2025, involving a third-party vendor environment hosted on Oracle’s cloud infrastructure. The incident reportedly stemmed from a zero-day exploit affecting Oracle’s systems, which impacted multiple customers.
Parexel has indicated that certain files hosted by the vendor were accessed without authorization and that those files may have contained personal information, including names, dates of birth, Social Security numbers, and financial account information associated with individuals connected to Parexel.
Federman & Sherwood is investigating the scope of the incident, the adequacy of security controls in place for vendor-hosted data, and whether affected individuals may be entitled to compensation or other legal remedies.
The compromised information may have included:
- Full name
- Social Security number
- Medical information
- Other sensitive information
What is Parexel International?
Parexel International is a leading global Clinical Research Organization (CRO) that helps biopharmaceutical companies develop and launch new medicines by providing comprehensive services for clinical trials, regulatory affairs, market access, and consulting.
Anyone who received a notification regarding this incident, or who believes their personal information may have been compromised, may contact Federman & Sherwood at 1-800-237-1277 or email info@federmanlaw.com for more information.