SCOTTSDALE, Ariz., March 28, 2025 /PRNewswire/ — SimonMed Imaging confirmed that it experienced a data incident in January 2025 and will issue notices to affected individuals and relevant state and federal agencies about the incident.
On January 27, 2025, SimonMed Imaging was alerted by one of our vendors that they were experiencing a security incident. After receiving this information, SimonMed Imaging (“SimonMed” or “we”) promptly began a review of our own systems and on the following day, January 28, 2025, discovered suspicious activity on our network (the “Incident”). Upon discovering we were the victim of a criminal attack, we immediately began an investigation and took steps to contain the situation, including resetting passwords, enhancing multifactor authentication, implementing endpoint detection and response monitoring, removing all third-party vendor direct access to systems within SimonMed’s environment and all associated tools, limiting only whitelisted traffic into and from our network, notifying law enforcement, and engaging data security and privacy professionals to assist. The SimonMed team has been working diligently to continue its investigation and add further technical safeguards to our existing protections.
Through our investigation, we determined that there was unauthorized access to our systems between January 21, 2025 and February 5, 2025. Due to the nature of the Incident, the investigation is still ongoing into what data pertaining to individuals was affected.
Based on our investigation findings to date, we believe the following types of information may have been affected: name, address, birth date, date of service, provider name, medical record number, patient number, medical condition, diagnosis and/or treatment information, medications, health insurance information, or driver’s license numbers. These are general categories of information that we believe may be present within the affected systems and may have been accessed by unauthorized actors during the Incident. However, the full list of specific individuals and the extent of the information accessed are not yet known. Because our investigation is ongoing, we are providing notice to all individuals who may potentially be affected by this situation.
As our investigation continues, we encourage individuals who may be potentially impacted to remain vigilant against incidents of identity theft and fraud. We encourage a cautious review of account statements and explanation of benefits forms for suspicious activity. Additional monitoring can be conducted by checking free credit reports for suspicious activity and errors. Under U.S. law, individuals are entitled to one free credit report annually from each of the three major credit reporting bureaus. Additional information and resources are outlined below.
Equifax
Experian
TransUnion
https://www.equifax.com/personal/credit-report-services/
https://www.experian.com/help/
https://www.transunion.com/credit-help
1-888-298-0045
1-888-397-3742
1-833-395-6938
Equifax Fraud Alert, P.O. Box 105069 Atlanta, GA 30348-5069
Experian Fraud Alert, P.O. Box 9554, Allen, TX 75013
TransUnion Fraud Alert, P.O. Box 2000, Chester, PA 19016
Equifax Credit Freeze, P.O. Box 105788 Atlanta, GA 30348-5788
Experian Credit Freeze, P.O.
Box 9554, Allen, TX 75013
TransUnion Credit Freeze, P.O.
Box 160, Woodlyn, PA 19094
Moreover, information regarding identity theft, fraud alerts, security freezes, and the steps an individual can take to protect personal information may be obtained by contacting the consumer reporting agencies, the Federal Trade Commission, or the appropriate state Attorney General. The Federal Trade Commission can be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Individuals can obtain further information on how to file such a complaint by calling 1-877-438-4338. Individuals should file a police report if they are a victim of identity theft or fraud. To file a report with law enforcement for identity theft, an individual will likely need to provide some proof that they have been a victim.
We take this Incident and the security of information in our care seriously. If you have additional questions, you may contact us at 602-688-6116 Monday through Friday from 8:00 AM to 5:00 PM AZ time.
View original content:https://www.prnewswire.com/news-releases/simonmed-imaging-provides-notice-of-security-incident-302414648.html
SOURCE SimonMed Imaging