Ultramobile Imaging, a mobile diagnostic imaging provider serving the Rochester, New York region, appears on the federal health privacy breach portal with a hacking incident affecting 75,000 individuals. The filing was submitted to the U.S. Department of Health and Human Services on September 25, 2026.
Ultramobile Imaging’s Data Breach Investigation
Ultramobile Imaging, which also writes its name as UltraMobile Imaging, provides mobile diagnostic services in the Rochester region of New York. According to its own website, its licensed technologists travel to the bedside of patients in long-term care and post-acute care settings, as well as to private residences, to perform exams. The services it lists include X-ray exams, ultrasound exams, echocardiograms, Holter monitoring and electrocardiograms, and results are made available to ordering providers through a secure online database.
The company appears on the public breach portal run by the U.S. Department of Health and Human Services Office for Civil Rights. Healthcare organizations that are covered by federal health privacy law must report certain breaches of unsecured protected health information to the agency, and the portal lists those reports publicly. The Ultramobile Imaging entry is classified as a healthcare provider located in New York, with 75,000 individuals affected.
The portal describes the type of breach as a hacking or IT incident, and it lists a network server, along with an additional location category, as where the breached information was held. The portal shows a breach submission date of September 25, 2026. It also marks business associate present as no, so the entry does not point to an outside vendor as the source of the incident.
That is nearly all the public record says. The portal entry does not give the date the intrusion began, the date it was found, or the date any notice was mailed to patients. It does not describe how an outside party got in, whether files were copied, or whether anyone has claimed responsibility. No notice letter, press statement or news report from the company was found in the sources reviewed, so this page does not guess at any of those details.
The size of the entry stands out. A figure of 75,000 individuals is large for a company whose business is bringing diagnostic equipment to patients who often live in nursing homes and rehabilitation facilities. Imaging providers hold records on behalf of the facilities and physicians who order the tests, and a single provider may therefore hold information about many people who never dealt with the company directly. A person could be affected without remembering the company’s name.
Diagnostic imaging records can be sensitive. A typical file may combine identifying details with insurance information, the ordering physician, the type of exam performed and clinical findings. That is general context about the industry, not a statement about what was held or taken in this case, because the public filing does not list the types of information involved. When health information is exposed, the risks go beyond financial fraud, since details about a person’s medical condition cannot be changed the way a password or card number can.
Anyone who has had an exam performed by a mobile imaging service in the Rochester area, including residents of nursing homes and their family members, may want to watch the mail for a notice letter. When a notice arrives, its description of what happened and what information was involved will be the most reliable record for your own situation. If you believe you were affected but have not received a letter, you can contact the company’s compliance department using the contact details on its website.
People who are notified of a healthcare breach should also be careful about scams. Criminals sometimes copy the language of real notices to trick recipients into sharing account details or paying a fee. Verify any request for personal information by calling a number you already trust, and do not follow links in unexpected texts or emails that mention the incident.
This page will be reviewed if the company or a regulator publishes more detail about the cause, the dates and the information involved.
When Did This Breach Occur?
The federal breach portal lists a submission date of September 25, 2026. The entry does not state when the incident occurred, when it was discovered, or when notices were sent.
If you receive a notice, the dates it gives will be the most reliable record of the timeline for your information.
What Information Was Breached?
The public filing does not say what types of information were involved, and no notice letter was available in the sources reviewed. No specific data types have been confirmed.
Because an imaging provider may hold identity, insurance and health details, it is sensible to read any notice you receive closely to see which of your details, if any, were included.
What You Can Do
If you received a notice related to Ultramobile Imaging or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Ask your nursing home, physician or insurer whether Ultramobile Imaging performed an exam for you, and review any explanation of benefits statements for services you do not recognize.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Ultramobile Imaging
If you are notified that your personal or health information was exposed in an incident involving Ultramobile Imaging, you may have legal options. Healthcare providers are expected to safeguard the sensitive information entrusted to them, and a class action can help hold them accountable when they fail to do so.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
