Radia Inc. Hit by CHAOS Ransomware Attack, Exposing 655GB of Sensitive Data
On July 16, 2026, Radia Inc. P.S., a prominent physician-owned radiology group based in Washington state, fell victim to a ransomware attack claimed by the CHAOS cybercriminal group. The attackers asserted they exfiltrated 655GB of sensitive data, which was subsequently posted on the dark web.
Radia Inc., which employs over 200 board-certified radiologists and serves 50+ hospital and clinic partners, provides critical imaging services across the region. The breach compromised a broad range of confidential information, including:
- Patient data: Full names, Social Security numbers, medical record numbers, dates of birth, diagnostic imaging reports, and billing records.
- Corporate records: Financial documents (tax filings, banking records, accounts payable/receivable), legal contracts, and HR files.
- Employee information: Social Security numbers, 401k details, benefits data, I-9 forms, and ADP system records.
The exposed data spans protected health information (PHI), personally identifiable information (PII), and internal business documents, raising significant concerns about identity theft, financial fraud, and operational disruptions. Shamis & Gentile P.A., a class-action law firm, is investigating potential legal action for affected individuals, citing damages such as identity monitoring costs and financial losses.
The incident underscores the growing threat of ransomware attacks targeting healthcare providers, where the combination of medical and financial data makes them prime targets for cybercriminals.
Source: https://www.claimdepot.com/investigations/radia-data-breach-2026
Radia Inc., P.S. cybersecurity rating report: https://www.rankiteo.com/company/radia
"id": "RAD1785789050",
"linkid": "radia",
"type": "Ransomware",
"date": "7/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'radiology',
'location': 'Washington state, USA',
'name': 'Radia Inc. P.S.',
'size': '200+ board-certified radiologists, 50+ '
'hospital and clinic partners',
'type': 'healthcare provider'}],
'data_breach': {'data_exfiltration': '655GB posted on the dark web',
'personally_identifiable_information': ['full names',
'Social Security '
'numbers',
'medical record '
'numbers',
'dates of birth',
'diagnostic imaging '
'reports',
'billing records',
'401k details',
'benefits data',
'I-9 forms',
'ADP system records'],
'sensitivity_of_data': 'high',
'type_of_data_compromised': ['patient data',
'corporate records',
'employee information']},
'date_detected': '2026-07-16',
'description': 'Radia Inc. P.S., a prominent physician-owned radiology group '
'based in Washington state, fell victim to a ransomware attack '
'claimed by the CHAOS cybercriminal group. The attackers '
'exfiltrated 655GB of sensitive data, which was subsequently '
'posted on the dark web. The breach compromised patient data, '
'corporate records, and employee information, raising concerns '
'about identity theft, financial fraud, and operational '
'disruptions.',
'impact': {'brand_reputation_impact': 'significant',
'data_compromised': '655GB',
'identity_theft_risk': 'high',
'legal_liabilities': 'potential legal action',
'operational_impact': 'operational disruptions'},
'motivation': 'financial gain',
'ransomware': {'data_exfiltration': '655GB', 'ransomware_strain': 'CHAOS'},
'references': [{'source': 'cyber incident report'}],
'regulatory_compliance': {'legal_actions': 'potential class-action lawsuit '
'(Shamis & Gentile P.A.)',
'regulations_violated': ['HIPAA']},
'threat_actor': 'CHAOS',
'title': 'Radia Inc. Hit by CHAOS Ransomware Attack, Exposing 655GB of '
'Sensitive Data',
'type': 'ransomware'}