New York Radiology Group Hit by 2025 Data Breach, Patient Data Potentially Exposed
Associated Radiologists of the Finger Lakes (ARFL), a New York-based radiology group, disclosed a data breach that occurred in late October 2025, notifying patients on December 29. The company detected suspicious activity on its network on October 30, later confirming unauthorized access between October 28 and 30. During this period, an unknown individual or group accessed and copied files from a subset of ARFL’s systems.
ARFL responded by isolating and taking the affected systems offline before launching an investigation. While the full scope of the breach remains unclear, the compromised data may have included sensitive patient information such as names, addresses, medical record numbers, partial or full Social Security numbers, dates of birth, clinical and treatment details, procedure information, provider names, prescription data, and health insurance information.
The investigation is ongoing, and ARFL has not yet determined which specific patient records were impacted. The incident highlights the persistent threat of cyberattacks targeting healthcare providers and the potential exposure of highly sensitive medical and personal data.
Houston Radiology Associated (HRA) cybersecurity rating report: https://www.rankiteo.com/company/houston-radiology-associated
"id": "HOU1767654386",
"linkid": "houston-radiology-associated",
"type": "Breach",
"date": "10/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'New York, USA',
'name': 'Associated Radiologists of the Finger Lakes, '
'P.C.',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Patients informed on Dec. 29, 2025',
'data_breach': {'data_exfiltration': 'Files were accessed and copied without '
'permission',
'personally_identifiable_information': 'Name, address, '
'medical record '
'number, full or '
'partial Social '
'Security number, date '
'of birth, clinical or '
'treatment '
'information, medical '
'procedure '
'information, medical '
'provider name, '
'prescription '
'information, health '
'insurance information',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Patient information'},
'date_detected': '2025-10-30',
'date_publicly_disclosed': '2025-12-29',
'description': 'Associated Radiologists of the Finger Lakes, P.C. informed '
'patients that its network was compromised in late October '
'2025, resulting in unauthorized access and copying of certain '
'files containing sensitive patient information.',
'impact': {'data_compromised': 'Name, address, medical record number, full or '
'partial Social Security number, date of '
'birth, clinical or treatment information, '
'medical procedure information, medical '
'provider name, prescription information, '
'health insurance information',
'identity_theft_risk': 'High',
'systems_affected': 'Subset of network'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Incident Notification'}],
'response': {'communication_strategy': 'Patient notification on Dec. 29, 2025',
'containment_measures': 'Affected systems were isolated and '
'taken offline'},
'title': 'Associated Radiologists of the Finger Lakes Data Breach',
'type': 'Data Breach'}