Radiology Associates of Richmond Data Breach

Radiology Associates of Richmond, Inc. (“RAR”) disclosed a cybersecurity incident involving unauthorized access to its network, potentially exposing sensitive personal and protected health information. The breach affected over 266,000 individuals, including 29 Maine residents, and RAR is providing guidance on monitoring, fraud alerts, and identity protection services.

Radiology Associates of Richmond, Inc.’s Data Breach Investigation

Radiology Associates of Richmond, Inc. experienced a cybersecurity incident in which an unauthorized actor gained access to its network environment. RAR discovered on or about April 6, 2026, that impacted systems, which were accessed on or about July 25, 2025, contained some personal information and protected health information.

Upon learning of the incident, RAR immediately took steps to contain the threat and secure its internal environment. The organization engaged external cybersecurity professionals to help investigate the incident and determine the extent of compromised data. An extensive forensic investigation and complex manual document review were conducted to assess what information had been accessed.

The company stated that it is unaware of any direct evidence of fraud or identity theft resulting from the incident. Out of an abundance of caution, RAR advised affected individuals on precautionary measures to protect personal information, including placing fraud alerts or security freezes on credit reports and obtaining free credit reports. RAR also provided guidance for safeguarding medical information and monitoring explanation of benefits statements.

RAR emphasized its commitment to maintaining the privacy of personal information and continually evaluates and modifies internal controls to enhance security. A dedicated toll-free response line is available for affected individuals to ask questions about the incident.

When Did This Breach Occur?

The unauthorized access occurred on July 25, 2025. The issue was identified through investigation on April 6, 2026. RAR conducted a detailed review to determine the scope of affected personal and health information.

What Information Was Breached?

The information potentially involved in the breach included:

• Full names
• Protected health information (PHI)
• Additional sensitive personal identifiers

The exact details varied by individual and were included in the personalized notification letters sent to affected individuals.

What You Can Do

Affected individuals are encouraged to take several steps to protect themselves:

1. Monitor Credit Reports – Obtain a free credit report annually from Equifax, Experian, and TransUnion at www.annualcreditreport.com.
2. Fraud Alerts – Place a 12-month initial fraud alert with one credit bureau, which notifies other bureaus to verify requests for new credit.
3. Credit Freezes – Freeze credit files with each bureau to restrict access and prevent unauthorized accounts. Instructions and contact information for Equifax, Experian, and TransUnion are provided in the notice.
4. Monitor Medical Information – Review explanation of benefits (EOBs) from your health insurance provider, verify services, and request copies of medical records if necessary.
5. Report Identity Theft – File a police report if you suspect fraud or identity theft. Contact the FTC via www.ftc.gov/idtheft or 1-877-IDTHEFT. State-specific guidance is also available for affected residents.

File a Data Breach Lawsuit Against Radiology Associates of Richmond, Inc.

If you received a data breach notification from Radiology Associates of Richmond, Inc., you may have legal rights to pursue compensation for exposure of personal and health information. Data breach lawsuits may seek reimbursement for out-of-pocket costs, time spent addressing the breach, fraud-related expenses, and loss of privacy.

Healthcare providers are required to implement reasonable cybersecurity measures to protect personal and health information. When unauthorized access occurs, affected individuals may hold the organization accountable through legal action.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.