RadNet radnet.com

RadNet data breach: what happened and what to do

RadNet, a US imaging network, told the California Attorney General in September 2020 about a breach dated July 18, 2020. A server holding employee data was accessed and files were copied. Employee names, Social Security numbers and driver's license numbers were reportedly involved.

View all 13,177 breaches
Breach date
18 Jul 2020
Last updated

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

What happened

RadNet runs outpatient imaging centers across the US. In September 2020 it filed a breach notice with the California Attorney General. The incident dates to July 18, 2020, when an unknown party accessed a RadNet server that stored employee data and copied files to an external server.

What the sources say

The court complaint filed in October 2020 says the files included employee names, Social Security numbers and driver's license numbers, and also dates of birth, addresses and passport numbers. This was employee data, not patient records. A sample notice filed with the Maine Attorney General, dated September 21, 2020, says RadNet found the activity quickly, blocked further access and retrieved the copied files. It also offered identity protection through ID Experts. RadNet hasn't published a total in the sources used here, and Maine's count of 3 residents is a single state.

What it means for you

If you worked at RadNet around 2020, the details on that list are the kind used to open credit or file a false tax return. Retrieved copies reduce the risk but don't remove it. A passport number adds a route to fake travel or identity documents, so keep an eye out for anything linked to it.

A class action followed in October 2020. If you got a notice letter, it should explain how to sign up for the free identity protection.

Sources checked: maine.gov, infobytes.orrick.com, oag.ca.gov

Last verified against the official page:

How we research this Report an error

What to do if you were in it

  1. 1

    Freeze your credit

    A credit freeze is free and stops lenders from opening new accounts in your name. Place it separately at Equifax, Experian and TransUnion, as the FTC explains. Lift it only when you apply for credit yourself.

  2. 2

    Use the identity protection in your letter

    If your notice offered free identity protection, enroll with the instructions in the letter itself. The FTC advises taking it.

  3. 3

    Check your credit reports

    Get your free reports at annualcreditreport.com and look for accounts you don't recognize.

  4. 4

    Expect messages that mention the breach

    Criminals use your name and employment history to make scam emails, texts and calls sound real. Don't click links or call numbers in them. Go to the company's own site, or call the number on your card or statement.

  5. 5

    Report misuse

    If someone opens accounts or files claims in your name, report it at IdentityTheft.gov, the FTC's reporting site, which gives you a recovery plan.

Official filings

Timeline

  1. The breach happened

  2. Reported to the California Attorney General

Frequently asked

Was I affected by the RadNet breach?

The sources describe employee data. If you worked for RadNet around 2020, look for a notice letter from September 2020 and ask HR if none came.

What was exposed?

Per the court complaint: employee names, Social Security numbers, driver's license numbers, dates of birth, addresses and passport numbers.

Were patients affected?

The sources used here describe employee data only.

Should I freeze my credit?

Yes. With a Social Security number in the data, a free freeze is the FTC's recommended step.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related articles

All articles

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.