Radiology Associates of Richmond Data Breach Exposes Sensitive Patient Information
Radiology Associates of Richmond (RAR), a Virginia-based radiology practice with one office and partnerships across seven hospitals and three imaging centers in the Richmond area, has reported a data breach that may have compromised sensitive patient information. The incident, discovered in 2025, involved unauthorized access to files containing protected health information (PHI) on or around July 25, 2025.
An investigation, conducted with cybersecurity experts and concluding on April 6, 2026, confirmed that exposed data may include medical records, financial account codes, credit and debit card details, names, and Social Security numbers. On May 21, 2026, RAR began notifying affected individuals via available contact information.
Legal representatives are now examining the breach to determine whether a class action lawsuit can be filed on behalf of impacted individuals, citing potential harm such as loss of privacy, out-of-pocket costs, and time spent addressing the incident. The breach was also reported to the Vermont Attorney General’s Office, as part of regulatory compliance.
This incident adds to a growing list of healthcare-related cybersecurity breaches in 2026, underscoring ongoing vulnerabilities in the protection of patient data.
Source: https://www.classaction.org/data-breach-lawsuits/radiology-associates-of-richmond-may-2026
RADIOLOGY ASSOCIATES OF RICHMOND, INC cybersecurity rating report: https://www.rankiteo.com/company/radiology-associates-of-richmond-inc
"id": "RAD1779489531",
"linkid": "radiology-associates-of-richmond-inc",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Virginia, USA',
'name': 'Radiology Associates of Richmond (RAR)',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Notification to affected individuals via available '
'contact information on May 21, 2026',
'data_breach': {'personally_identifiable_information': 'Names, Social '
'Security numbers, '
'credit and debit card '
'details',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Protected health information '
'(PHI), medical records, '
'financial account codes, credit '
'and debit card details, names, '
'Social Security numbers'},
'date_detected': '2025',
'date_publicly_disclosed': '2026-05-21',
'date_resolved': '2026-04-06',
'description': 'Radiology Associates of Richmond (RAR), a Virginia-based '
'radiology practice, reported a data breach that may have '
'compromised sensitive patient information, including medical '
'records, financial account codes, credit and debit card '
'details, names, and Social Security numbers. The breach was '
'discovered in 2025 and involved unauthorized access to files '
'containing protected health information (PHI).',
'impact': {'brand_reputation_impact': 'Potential harm such as loss of '
'privacy, out-of-pocket costs, and time '
'spent addressing the incident',
'data_compromised': 'Protected health information (PHI), medical '
'records, financial account codes, credit and '
'debit card details, names, Social Security '
'numbers',
'identity_theft_risk': 'High (Social Security numbers exposed)',
'legal_liabilities': 'Potential class action lawsuit',
'payment_information_risk': 'High (credit and debit card details '
'exposed)'},
'investigation_status': 'Concluded',
'references': [{'source': 'Vermont Attorney General’s Office'}],
'regulatory_compliance': {'legal_actions': 'Reported to Vermont Attorney '
'General’s Office',
'regulatory_notifications': 'Vermont Attorney '
'General’s Office'},
'response': {'communication_strategy': 'Notification to affected individuals '
'via available contact information on '
'May 21, 2026',
'third_party_assistance': 'Cybersecurity experts'},
'title': 'Radiology Associates of Richmond Data Breach Exposes Sensitive '
'Patient Information',
'type': 'Data Breach'}