Lumexa Imaging Says Vendor Attack May Have Exposed Patient Data
Summary
The report says an attacker accessed sensitive patient documents through a Lumexa Imaging service provider between March 31 and April 9, 2026. Records may include medical, insurance and financial details; Lumexa began sending notices and offering identity-protection服务.
Key points
- A service provider detected suspicious network activity on April 9; Lumexa disconnected its systems from the provider.
- Forensic findings placed the attacker’s access between March 31 and April 9, 2026. On April 15, Lumexa said the intruder may have accessed patient documents.
- The records were associated with patients of affiliated radiology practices and imaging centers.
- Reportedly exposed information includes names, contact details, account and insurance information, diagnoses, examination dates and radiology-service details; some records also included Social Security numbers.
- Lumexa began notifying affected people in mid-May and offered credit monitoring and identity-recovery services through Kroll, plus a hotline.
- Several law firms are investigating potential claims, including questions about security measures and notification timing; the article does not say lawsuits have been filed.
Article Details
- Victim Organization
- Lumexa Imaging
- Incident Type
- Third-party service-provider cyber incident involving unauthorized access to patient documents and exposure of sensitive health and personal information.
- Incident Date
- 2026-03-31
- Data Types Exposed
- Names
- Dates of birth
- Addresses
- Telephone numbers
- Account numbers
- Health insurance details
- Clinical data, including diagnoses, examination dates, and radiology-service information
- Social Security numbers for some affected individuals
- Affected Records
- Unknown; the article says the number of affected patients was expected to be determined in the coming weeks.
- Affected Data Size
- Unknown
- Operational Impact
- Lumexa severed its connection to the service provider after suspicious network activity was detected. The company began notifying affected individuals in mid-May 2026 and offered credit-monitoring and identity-recovery services and a hotline. Management said the incident was not material to the overall business and was not expected to significantly affect its financial forecast.
- Ransom Or Extortion
- Unknown; no ransom or extortion activity is described.
- Claim Status
- confirmed