Akumin Inc.

HHS OCR settled a HIPAA Security Rule investigation with USR Holdings, LLC, a Florida business associate, for $337,750. The settlement resolved allegations that USR failed to maintain retrievable exact copies of electronic protected health information (ePHI) after an unauthorized third party deleted ePHI from a database in 2018. USR agreed to a corrective action plan including risk analysis and regular system reviews.

Akumin, Inc. disclosed a ransomware incident in October 2023 where malware encrypted files and data was exfiltrated. The breach affected patient and employee data including SSNs, medical records, and payment card info. Akumin notified law enforcement, took systems offline, and is issuing rolling notifications. Rhode Island residents are specifically noted (approx. 15,448).

Akumin, Inc. disclosed a ransomware incident in October 2023 where malware encrypted files and data was exfiltrated. Affected data included names, addresses, SSNs, DOBs, medical records, and payment card info. Notification letters were mailed December 23, 2024.

Akumin Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-11 and was reported on 2024-12-23. 25,730 Indiana residents were affected.

Akumin, Inc., a healthcare imaging provider, experienced a ransomware incident on October 11, 2023. Malware locked access to computer files, and files were copied without permission. Affected data includes PHI, SSNs, and payment card information for patients and employees. Akumin contained the incident, took systems offline, and is providing credit monitoring.

Akumin, Inc., a healthcare imaging provider, disclosed a ransomware incident on October 11, 2023, affecting approximately 5,063 Washington residents. Unstructured data containing PII, PHI, and financial info was copied. Akumin isolated systems, rebuilt networks, and notified law enforcement and regulators. Notices to residents began in December 2023 and continued through December 2024.

Akumin, Inc., a healthcare imaging provider, experienced a ransomware incident on October 11, 2023. Malware locked access to computer files, and files were copied without permission. Affected data includes names, addresses, dates of birth, Social Security numbers, medical record numbers, billing information, and payment card information for patients and employees. Akumin contained the incident, took systems offline, and is notifying affected individuals on a rolling basis.

Akumin, Inc. notified New Hampshire residents of a data breach involving unauthorized access to patient information. The incident, first identified in October 2023, resulted in the exposure of personal and government-issued identifiers. Akumin isolated its network, rebuilt systems, and notified federal and state regulators. Approximately 15,438 NH residents were affected.

AKUMIN, INC. filed a data-breach notice with the Illinois Attorney General in December 2024 (case 24-12-044). The register records the breach as discovered on October 11, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Akumin Operating Corp. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-29. 1 Massachusetts residents were affected. The report records the breach type as electronic.