Lumexa Imaging

Lumexa Imaging, a provider of administrative services to radiology practices, notified the NH Attorney General of a breach involving a third-party vendor. Between March 31 and April 9, 2026, an unauthorized individual accessed patient records, potentially exposing names, SSNs, DOBs, and clinical data for 186 NH residents. Lumexa disconnected systems, notified the AG on June 12, 2026, and offered credit monitoring via Kroll.

Lumexa Imaging reported a third-party vendor breach affecting 3,632 Washington residents. Unauthorized access occurred March 31–April 9, 2026, exposing patient PII, SSNs, and clinical data. Lumexa detected the incident on April 15, 2026, and began notifying individuals on May 15, 2026. The vendor remediated the issue and Lumexa provided credit monitoring services.

Lumexa Imaging, a provider of administrative services to radiology practices, notified Nebraska AG that a third-party vendor experienced unauthorized access to a network portion dedicated to Lumexa. Between March 31 and April 9, 2026, patient information (names, SSNs, DOB, clinical data) of approximately 157 Nebraska residents was accessed. Lumexa discovered the incident on April 15, 2026, disconnected systems, and began notifying affected individuals on May 15, 2026, offering credit monitoring via Kroll.

Lumexa Imaging, a provider of administrative services to radiology practices, disclosed a breach involving a third-party vendor's system. Between March 31 and April 9, 2026, an unauthorized individual accessed patient information, potentially including names, SSNs, DOBs, and clinical data. Lumexa disconnected systems, engaged Kroll for credit monitoring, and the vendor remediated by resetting passwords and enhancing monitoring. The incident affects residents in multiple states, primarily Massachusetts.

Lumexa Imaging reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-06-12. The reporting organization type is Health Care. 98 Vermont residents were affected. Categories of data breached: Social Security Numbers, Health Records.

Lumexa Imaging based in Raleigh, North Carolina, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-04-15 and reported on 2026-05-18. 251 Texas residents were affected. 2,994 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

Lumexa Imaging notified South Carolina residents that an unauthorized individual accessed a third-party vendor's system between March 31 and April 9, 2026. Patient information, including names, SSNs, DOBs, and clinical data, may have been viewed. Lumexa disconnected from the vendor and Kroll is providing identity monitoring.

Lumexa Imaging reported a data breach to the Oregon Attorney General. The breach was reported on 2026-05-15. The breach occurred during 3/31/2026 - 4/9/2026. The breach was discovered on 4/15/2026. 2,994 individuals were affected. Notice was sent on 5/15/2026.

Lumexa Imaging reported to HHS on 2026-05-15 a Hacking/IT Incident affecting 2994 individuals. Breached information located on Network Server.

Lumexa Imaging reported to HHS on 2026-05-15 a Hacking/IT Incident affecting 5,830,949 individuals. Breached information located on Network Server. No business associate was involved.

Lumexa Imaging notified individuals that an unauthorized individual accessed a third-party vendor's system, potentially viewing patient information. The incident occurred between March 31 and April 9, 2026. Lumexa discovered the suspicious activity on April 9, 2026. Data involved included names, SSNs, DOBs, and clinical information. Lumexa engaged Kroll for credit monitoring.

Lumexa Imaging notified patients that an unauthorized individual accessed a third-party vendor's system between March 31 and April 9, 2026. The vendor provided non-clinical operational support. Patient information, including names, SSNs, dates of birth, and clinical health data, may have been viewed or obtained. Lumexa disconnected systems from the vendor network and is offering identity monitoring via Kroll.

LUMEXA IMAGING filed a data-breach notice with the Illinois Attorney General in May 2026 (case 26-05-1208). The register records the breach as discovered on April 15, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.