SimonMed Imaging discloses a data breach impacting over 1.2 million people

SimonMed Imaging disclosed a major healthcare data breach after the Medusa ransomware group claimed responsibility for stealing 200 GB of data and exposing information relating to more than 1.2 million individuals. According to the Maine Attorney General’s data breach notice shared by the company, suspicious activity was detected on 28 January 2025, with unauthorized access occurring from 21 January to 5 February 2025.

The exposed data includes personal identifiers and medical details such as names, addresses, birth dates, dates of service, medical records, diagnoses and treatment information, as well as driver’s licences, government IDs, financial account numbers, authentication credentials and biometric data.

The Medusa group added SimonMed Imaging to its Tor data leak site and demanded a ransom of $1 million, though the firm says there is no evidence that any information has been misused for identity theft or fraud at this stage. Exposed data may enable identity theft, medical identity theft and other abuses, and the company is offering free annual credit reports to help victims detect suspicious activity.