Mt. Baker Imaging, also known as Northwest Radiologists, has reported a significant data breach involving unauthorized access to sensitive patient and personal data. The breach affected at least 43 New Hampshire residents.
Mt. Baker Imaging’s Data Breach Investigation
Mt. Baker Imaging, located in Bellingham, Washington, disclosed a cybersecurity incident that disrupted portions of its network. The incident was first detected on January 25, 2025, after the organization experienced a network disruption. Immediate steps were taken to investigate the source and scope of the breach, including notifying law enforcement and enlisting third-party cybersecurity experts to assist with the investigation.
The forensic review determined that an unauthorized party had gained access to Mt. Baker Imaging’s systems over a five-day period, from January 20 to January 25, 2025. Sensitive information stored on the network was exposed during this window, prompting Mt. Baker Imaging to undertake an extensive analysis to identify affected individuals and the types of data compromised.
Following the review, Mt. Baker Imaging began efforts to obtain accurate address information to notify those impacted. This process concluded around June 27, 2025. On October 23, 2025, address verification results were received via a National Change of Address (NCOA) check, confirming that 43 New Hampshire residents were affected. Notification letters were then sent out beginning October 29, 2025.
To help mitigate potential harm, Mt. Baker Imaging provided credit monitoring services and launched a call center to support those impacted. While no misuse of the exposed data has been reported to date, the broad range of sensitive medical and personal information involved raises serious concerns for affected individuals. The breach highlights the importance of robust cybersecurity practices, especially in the healthcare sector.
When Did This Breach Occur?
Unauthorized access occurred between January 20, 2025, and January 25, 2025. Notification efforts to impacted individuals began on October 29, 2025.
What Information Was Breached?
Depending on the individual, the data potentially accessed includes:
- Full name
- Address
- Telephone number
- Date of birth
- Email address
- Social Security number
- Driver’s license or state ID number
- Treatment or diagnosis information
- Provider name
- Medical record number or patient ID number
- Health insurance information
- Treatment cost information
What You Can Do
If you were notified by Mt. Baker Imaging or suspect your information was compromised, you should take immediate action:
- Enroll in the credit monitoring services offered.
- Review your Explanation of Benefits (EOB) from your health insurer for unfamiliar services.
- Monitor your bank, credit, and insurance statements regularly.
- Request and review your credit report for suspicious activity.
- Consider placing a fraud alert or security freeze with the major credit bureaus.
- Report suspected identity theft to the FTC at IdentityTheft.gov.
This breach includes not only personal identifiers but also private medical details. Protecting your information and seeking legal guidance is crucial. Class Action U is here to help you learn your rights.
