RadNet data breach: what happened and what to do
RadNet, a US imaging network, told the California Attorney General in September 2020 about a breach dated July 18, 2020. A server holding employee data was accessed and files were copied. Employee names, Social Security numbers and driver's license numbers were reportedly involved.
View all 13,177 breaches- Breach date
- 18 Jul 2020
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
RadNet runs outpatient imaging centers across the US. In September 2020 it filed a breach notice with the California Attorney General. The incident dates to July 18, 2020, when an unknown party accessed a RadNet server that stored employee data and copied files to an external server.
What the sources say
The court complaint filed in October 2020 says the files included employee names, Social Security numbers and driver's license numbers, and also dates of birth, addresses and passport numbers. This was employee data, not patient records. A sample notice filed with the Maine Attorney General, dated September 21, 2020, says RadNet found the activity quickly, blocked further access and retrieved the copied files. It also offered identity protection through ID Experts. RadNet hasn't published a total in the sources used here, and Maine's count of 3 residents is a single state.
What it means for you
If you worked at RadNet around 2020, the details on that list are the kind used to open credit or file a false tax return. Retrieved copies reduce the risk but don't remove it. A passport number adds a route to fake travel or identity documents, so keep an eye out for anything linked to it.
A class action followed in October 2020. If you got a notice letter, it should explain how to sign up for the free identity protection.
Sources checked: maine.gov, infobytes.orrick.com, oag.ca.gov
Last verified against the official page:
What to do if you were in it
- 1
Freeze your credit
A credit freeze is free and stops lenders from opening new accounts in your name. Place it separately at Equifax, Experian and TransUnion, as the FTC explains. Lift it only when you apply for credit yourself.
- 2
Use the identity protection in your letter
If your notice offered free identity protection, enroll with the instructions in the letter itself. The FTC advises taking it.
- 3
Check your credit reports
Get your free reports at annualcreditreport.com and look for accounts you don't recognize.
- 4
Expect messages that mention the breach
Criminals use your name and employment history to make scam emails, texts and calls sound real. Don't click links or call numbers in them. Go to the company's own site, or call the number on your card or statement.
- 5
Report misuse
If someone opens accounts or files claims in your name, report it at IdentityTheft.gov, the FTC's reporting site, which gives you a recovery plan.
Official filings
- California Attorney General , filed 18 Sept 2020
Timeline
-
The breach happened
-
Reported to the California Attorney General
Frequently asked
Was I affected by the RadNet breach?
The sources describe employee data. If you worked for RadNet around 2020, look for a notice letter from September 2020 and ask HR if none came.
What was exposed?
Per the court complaint: employee names, Social Security numbers, driver's license numbers, dates of birth, addresses and passport numbers.
Were patients affected?
The sources used here describe employee data only.
Should I freeze my credit?
Yes. With a Social Security number in the data, a free freeze is the FTC's recommended step.
Sources
- maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9b139987-6748-4fea-94d8-d3dd910f9d90.shtml
- infobytes.orrick.com/wp-content/uploads/pdf/Buckley%20InfoBytes%20-%20Pfeiffer%20v%20Radnet%20-%20U.S.%20District%20Court%20for%20the%20Central%20District%20of%20California-%20Complaint%20-%202020.10.pdf
- oag.ca.gov/privacy/databreach/list
- consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- identitytheft.gov/databreach
Something wrong or out of date? Tell us and we'll re-check it.