Radiology Firm Breached, Exposing the Personal Data of 266,183 Individuals – ID Numbers, Financial Info and Health Data at Risk

Bad actors compromised the network of a Virginia-based radiology firm, placing the data of 266,183 people at risk.

Radiology Associates of Richmond (RAR) disclosed the breach to a slew of government regulators last week.

The firm discovered the incident in April, but the actual hack occurred back in July 2025.

RAR wasn’t entirely clear on what data was compromised, though a listing with the Texas Attorney General’s office indicates impacted information includes government-issued ID numbers; financial info (including account numbers and credit/debit card numbers); medical info; and health insurance info.

Unlike numerous other firms that have suffered massive data breaches recently, Radiology Associates of Richmond opted not to offer identity theft protection services to individuals impacted by their cybersecurity issues.

In a letter to impacted individuals, the firm claims it is “unaware of any evidence of fraud or identity theft directly resulting from this incident.” The letter does encourage impacted individuals to place fraud alerts and/or security freezes on their credit files.

It’s not RAR’s first high-profile security lapse: In 2024, a hacker gained unauthorized access to the firm’s network, compromising data that impacted approximately 1.42 million individuals. That data breach spurred a $5 million class-action lawsuit.

Generated Image: Midjourney