HackingHealthcareHealthcareStolen CredentialsData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Vital Imaging Medical Diagnostic Centers, LLC

bd_5583103d7251bd57 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2025

Filed

May 28, 2026

To disclose

16 months

Affected

17state residents only

Confidence

66%

Full breach record for Vital Imaging Medical Diagnostic Centers, LLC →2 incidents on file

Vital Imaging Medical Diagnostic Centers, LLC notified Massachusetts residents of a data breach involving unauthorized network activity and file exfiltration. The incident, discovered in February 2025 and resolved in February 2026, affected employees and dependents. Affected data included names combined with government identifiers (SSN, DOB, driver's license). The company engaged forensic investigators, reported to law enforcement, and provided Kroll identity monitoring services.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d16 months discovery → filing

Incident timeline

discovery → filing · 16 months / 469 days

Feb 13, 2025

Discovered

May 28, 2026

Filed

vs. sector median

+56 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed17 affectedView incident

Name: Vital Imaging Medical Diagnostic Centers, LLC
norm: vital imaging medical diagnostic centers

Name: Vital Imaging Medical Diagnostic Centers, LLC
norm: vital imaging medical diagnostic centers
Industry: Healthcarellm

Discovered: Feb 13, 2025
Materiality determined: —
Notification sent: Feb 19, 2026
Affected individuals: 17state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Initial access: valid_credentials

During the incident: Partnered with an outside IT security firm to investigate the incident
Reported the incident to law enforcement
Changes made: Providing you with identity monitoring services through Kroll
Assess our existing security safeguards and policies for ways to remain resilient against evolving threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 months(469 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-864-vital-imaging-medical-diagnostic-centers-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2026
Raw hash: 640ebbd6e2143cc565c66b44d5451d7d22994072e0dbda05bca1920fb4cae150

Reporting entityVital Imaging Medical Diagnostic Centers, LLC

Victim entityVital Imaging Medical Diagnostic Centers, LLC

Incidentdiscovered Feb 13, 2025

Stated responsePartnered with an outside IT security firm to investigate the incident

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov