AKUMIN OPERATING CORP.

Akumin, Inc. disclosed a ransomware incident in October 2023 where malware encrypted files and data was exfiltrated. The breach affected patient and employee data including SSNs, medical records, and payment card info. Akumin notified law enforcement, took systems offline, and is issuing rolling notifications. Rhode Island residents are specifically noted (approx. 15,448).

Akumin, Inc. disclosed a ransomware incident in October 2023 where malware encrypted files and data was exfiltrated. Affected data included names, addresses, SSNs, DOBs, medical records, and payment card info. Notification letters were mailed December 23, 2024.

Akumin Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-11 and was reported on 2024-12-23. 25,730 Indiana residents were affected.

Akumin, Inc., a healthcare imaging provider, experienced a ransomware incident on October 11, 2023. Malware locked access to computer files, and files were copied without permission. Affected data includes PHI, SSNs, and payment card information for patients and employees. Akumin contained the incident, took systems offline, and is providing credit monitoring.

Akumin, Inc., a healthcare imaging provider, disclosed a ransomware incident on October 11, 2023, affecting approximately 5,063 Washington residents. Unstructured data containing PII, PHI, and financial info was copied. Akumin isolated systems, rebuilt networks, and notified law enforcement and regulators. Notices to residents began in December 2023 and continued through December 2024.

Akumin, Inc., a healthcare imaging provider, experienced a ransomware incident on October 11, 2023. Malware locked access to computer files, and files were copied without permission. Affected data includes names, addresses, dates of birth, Social Security numbers, medical record numbers, billing information, and payment card information for patients and employees. Akumin contained the incident, took systems offline, and is notifying affected individuals on a rolling basis.

Akumin, Inc. notified New Hampshire residents of a data breach involving unauthorized access to patient information. The incident, first identified in October 2023, resulted in the exposure of personal and government-issued identifiers. Akumin isolated its network, rebuilt systems, and notified federal and state regulators. Approximately 15,438 NH residents were affected.

AKUMIN, INC. filed a data-breach notice with the Illinois Attorney General in December 2024 (case 24-12-044). The register records the breach as discovered on October 11, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Akumin Operating Corp. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-29. 1 Massachusetts residents were affected. The report records the breach type as electronic.

Akumin Operating Corp. experienced a ransomware incident on October 11, 2023, where an unauthorized actor encrypted files and copied data. The company took systems offline and restored them. Notification was sent on December 29, 2023, offering identity monitoring services to affected individuals whose names were involved.

Akumin Operating Corp. reported to HHS on 2023-12-06 a Hacking/IT Incident affecting 7127 individuals. Breached information located on Network Server. The incident involved a ransomware attack affecting PHI including names, addresses, birthdates, driver's licenses, SSNs, diagnoses, and treatment information. The entity notified HHS, individuals, and media, and strengthened administrative, technical, and security safeguards.

AKUMIN OPERATING CORP. filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-873). The register records the breach as discovered on October 11, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.