River City Data
bd_c1ab7d9f98922e12 · schema v1 · pii pii-v2
Full breach record for River City Data →River City Data, a provider of scanning and document management services to healthcare providers, experienced a cybersecurity incident. An unauthorized actor gained access to the company's environment between November 17, 2025, and January 15, 2026. The company became aware of the incident on February 2, 2026. Affected data may include names, dates of birth, addresses, Social Security numbers, health insurance information, medical record numbers, and health information such as diagnoses and treatments. The company took systems offline, engaged external cybersecurity experts, and reported the incident to law enforcement. Identity monitoring services are being offered to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 17, 2025
Begins
Feb 2, 2026
Discovered
Aug 1, 2026
Filed
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.