About Parexel International, LLC (“Parexel”)
Parexel International, LLC is a prominent organization operating in the commercial sector, specifically involved in clinical research and biopharmaceutical services. Located in Raleigh, North Carolina, the company recently faced a data breach incident. The breach involved unauthorized access to files hosted by a third-party vendor used by Parexel. While the total number of affected individuals is yet to be determined, it was confirmed that 158 Maine residents were impacted by this incident.
What Happened
On October 4, 2025, we detected suspicious activity impacting a portion of our Oracle OCI E-Business Suite (“Oracle EBS”) environment hosted by Oracle and immediately engaged third-party cybersecurity experts to investigate. Our investigation has confirmed the activity stemmed from a zero-day exploit impacting Oracle’s cloud infrastructure that was announced by Oracle on October 5, 2025. Parexel is one of many Oracle customers believed to be impacted by this incident.
The breach occurred between August 9, 2025, and October 5, 2025, when unauthorized activity was detected on Parexel’s Oracle environment. The incident affected a portion of their Oracle cloud infrastructure, and it was discovered on November 20, 2025. The breach primarily impacted individuals whose personal information was stored in the compromised environment.
Next Steps
Individuals affected by this breach should promptly enroll in the offered identity monitoring services to safeguard their personal information. Parexel has provided instructions on enrollment, which can be accessed through a dedicated website or via phone. Affected users are also encouraged to monitor their credit reports and account statements for any unusual activity. Furthermore, they should consider placing fraud alerts or security freezes on their credit files to protect against potential identity theft.
Identity Theft Protection Services
Parexel is offering affected individuals a complimentary 24-month membership for IDX identity protection services. This service includes credit monitoring, identity theft detection, and resolution assistance. To activate the service, impacted individuals must follow the provided enrollment instructions before the deadline of March 17, 2026. The IDX service is designed to help detect and resolve any identity theft issues that may arise from this breach, providing peace of mind to those affected.