Precision Imaging Centers

Precision Imaging Centers, a Florida-based healthcare provider, experienced a **cybersecurity breach on November 2, 2022**, where an unauthorized actor gained access to its network and exfiltrated sensitive patient data. The compromised information included **names, addresses, Social Security numbers, driver’s license/ID numbers, health insurance details, medical conditions, diagnoses, and dates of birth** of current and former patients. The breach led to a **class-action lawsuit**, alleging negligence in safeguarding personal data. While Precision Imaging denied wrongdoing, it agreed to a settlement offering victims up to **$5,000 in reimbursement** (for extraordinary expenses like identity theft) or **$500 for ordinary costs** (e.g., credit monitoring, lost time), alongside **two years of free credit monitoring**. The breach exposed victims to potential **identity theft, financial fraud, and misuse of medical/financial records**, with claims subject to a **$200,000 aggregate cap**. The incident underscored vulnerabilities in healthcare data security, risking long-term reputational and financial harm to affected individuals.

Source: https://www.claimdepot.com/settlements/precision-imaging-centers

Precision Imaging Centers cybersecurity rating report: https://www.rankiteo.com/company/precisionimagingcenters

"id": "pre3003030111125",
"linkid": "precisionimagingcenters",
"type": "Breach",
"date": "11/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Current and former patients '
                                              '(exact number not specified)',
                        'industry': 'Healthcare',
                        'location': 'Jacksonville, Florida, USA',
                        'name': 'Precision Imaging Centers',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Eligible individuals may claim up to $5,000 in '
                        'reimbursement plus two years of free credit '
                        'monitoring. Claims must be filed by January 31, 2026.',
 'data_breach': {'data_exfiltration': 'Yes (data acquired by unauthorized '
                                      'actor)',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High (includes SSNs, medical records, '
                                        'and government IDs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Protected Health Information '
                                              '(PHI)']},
 'date_detected': '2022-11-02',
 'date_publicly_disclosed': '2023-06-22',
 'description': 'Precision Imaging Centers, a healthcare provider based in '
                'Jacksonville, Florida, experienced a cybersecurity incident '
                'on or around November 2, 2022, where an unauthorized actor '
                'accessed sensitive patient data, including names, addresses, '
                'Social Security numbers, driver’s license numbers, health '
                'insurance details, medical conditions, diagnoses, and dates '
                'of birth. The breach led to a class action lawsuit, resulting '
                'in a settlement offering affected individuals up to $5,000 in '
                'reimbursement plus credit monitoring services. The settlement '
                'fund is capped at $200,000, with claims subject to pro rata '
                'reduction if the total exceeds this amount.',
 'impact': {'brand_reputation_impact': 'Class action lawsuit and settlement',
            'data_compromised': ['Names',
                                 'Addresses',
                                 'Social Security numbers',
                                 'Driver’s license or government-issued '
                                 'identification numbers',
                                 'Health insurance details',
                                 'Medical conditions and diagnoses',
                                 'Dates of birth'],
            'identity_theft_risk': 'High (due to exposure of PII and sensitive '
                                   'medical data)',
            'legal_liabilities': 'Class action lawsuit settled with up to '
                                 '$200,000 fund'},
 'investigation_status': 'Settled (class action lawsuit resolved)',
 'references': [{'source': 'Class Action Settlement Notice'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit settled '
                                            '(alleged failure to protect '
                                            'personal information)'},
 'response': {'communication_strategy': 'Written notifications sent to '
                                        'affected individuals on or around '
                                        'June 22, 2023; public substitute '
                                        'notices for undeliverable mail.'},
 'stakeholder_advisories': 'Notifications sent to affected individuals; '
                           'settlement claims process established.',
 'threat_actor': 'Unauthorized actor',
 'title': 'Precision Imaging Centers Data Breach Settlement',
 'type': 'Data Breach'}