Akumin, a medical imaging services company, experienced a ransomware incident on October 11, 2023. This incident led to a data breach that was subsequently disclosed through various notifications in late 2023 and 2024. The company posted an announcement on its website on October 12, 2023, and later mailed notification letters on December 23, 2024.
The breach involved names, contact information, dates of birth, Social Security numbers, driver’s license numbers, passport numbers, medical record numbers, Medicare/Medicaid numbers, financial account information, health information, occupational health information, medical images, biometric information, billing and claims information, health insurance information, and electronic signatures. Initially, 7,127 individuals were reported to the HHS OCR as being affected, with additional notifications sent in December 2024. The total number of individuals impacted by these later notifications has not been publicly specified.
Akumin has agreed to a $1.5 million class action settlement to resolve claims related to this incident. Consumers who received additional notifications in December 2024 will have their specific affected data categories detailed in those letters, though the exact content of those letters is not publicly available.