SimonMed Data Breach Exposes Sensitive Information of 1.2 Million Patients

SimonMed Imaging has confirmed that an external hacking incident compromised the personal data of 1,275,669 patients, making it one of the largest healthcare breaches of the year. The breach occurred on 21 January 2025 but was not discovered until 28 January, with written notifications going out to affected individuals on 10 October 2025.

An internal investigation confirmed that patient names and other personal identifiers were accessed, though the company has not disclosed further details about the data elements involved. The total number of affected individuals includes 22 residents of Maine, and because the Maine residents affected were below 1,000, notification to consumer reporting agencies was not required under state law.

SimonMed Imaging retained Octillo Law PLLC to manage disclosures, and a sample letter to Maine residents is accessible via the Maine Attorney General’s office portal. Unlike some other healthcare breaches, the firm did not offer identity theft protection services to those impacted, citing confidence in existing security measures and ongoing monitoring.