HackingHealthcareHealthcareCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPHIPIIGovernment IDMediumContained

Expert MRI

bd_afa81d482c249306 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 23, 2026

To disclose

—

Affected

Not disclosed

Confidence

78%

Full breach record for Expert MRI →2 incidents on file

Expert MRI, a medical imaging provider based in Bellflower, CA, experienced unauthorized access to its systems between August 14–24, 2025, discovered on September 2, 2025. An unknown actor accessed and copied files containing protected health information including names, dates of birth, and potentially driver's license/state ID numbers. Expert MRI secured its systems, notified federal law enforcement, reviewed impacted files, and is offering complimentary credit monitoring via Epiq.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 14, 2025

Begins

Mar 23, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Expert MRI
norm: expert mri
Domain: expertmri.com

Name: Expert MRI
norm: expert mri
Domain: expertmri.com
Industry: Healthcarellm

Discovered: —
Breach occurred: Aug 14, 2025 – Aug 24, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIPIIGovernment ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1074 Data Staged
Threat actor: External
Regulator citations: Notified federal law enforcement

During the incident: Took steps to secure the network
Launched an extensive investigation to determine the nature and scope of the event
Reported this event to federal law enforcement and supported their investigation
Conducted an extensive review of impacted files to determine if any sensitive information could be affected
Notified applicable authorities, as required by law
Sent notification letters to affected individuals
Changes made: Reviewed existing policies and procedures and added additional safeguards
Providing access to complimentary credit monitoring and identity restoration services through Epiq
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-620694
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 23, 2026
Raw hash: f763e52a1ef1763604eb4e428cdf7675fd1c08a82cae97e3be62500dba4b481b

Reporting entityExpert MRI

Victim entityExpert MRI

IncidentUnauthorized Access

Stated responseTook steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov