SimonMed Imaging
bd_0ccf1523fb1521c2 · schema v1 · pii pii-v1
Full breach record for SimonMed Imaging →SimonMed Imaging experienced a data breach involving unauthorized access to systems between January 21 and February 5, 2025. The incident was discovered on January 28, 2025, after a vendor alerted the company to a security incident. An unauthorized party obtained files containing personal information, including names and potentially protected health information, for 39 individuals. SimonMed responded by resetting passwords, enhancing MFA, implementing EDR, removing third-party vendor access, and notifying law enforcement. Complimentary identity monitoring services were offered to affected individuals.
Linked disclosures
Why this link?Ransomware claims (2)
- bd_0d423abe97b4707fLeak Sitemedusafiled 2025-02-07(245d gap)Verified
- bd_d0b43d8c11131cf9Leak Sitemedusafiled 2025-01-27(256d gap)Candidate
Regulatory filings (1) · sorted by filing gap
- bd_960fde2557f26bd7Vermont State AGfiled 2025-10-10Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-612578
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 10, 2025
- Raw hash
- e8b72233638e450a42def3084b0662a564ce14533027de82c45b52f8a16b1e19
Reporting entity
- Name
- SimonMed Imagingnorm: simonmed imaging
- Domain
- simonmed.com
Victim entity
- Name
- SimonMed Imagingnorm: simonmed imaging
- Domain
- simonmed.com
Incident
- Discovered
- Jan 28, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 39
- Data types
- IDENTITY_BASICPHIHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported this Incident to relevant government agencies
- Third party
- via Vendor
- Initial access
- supply_chain
Compliance
- Time to disclose
- 36 weeks(255 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.