UltraMobile Imaging, a mobile diagnostic imaging provider in Rochester, New York, confirmed that a network intrusion discovered in July 2026 exposed the health, personal, and financial information of 75,000 patients. Exposed data includes diagnoses, lab results, medications, and financial account details. Affected individuals should monitor their credit reports and watch for medical identity theft right away.
| Company | UltraMobile Imaging |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Names, Addresses, Phone Numbers, Dates of Birth, Diagnoses, Lab Test Results, Medications, Financial Account Information, Claims Information |
| People Affected | 75,000 individuals |
| Attack Method | Unauthorized Network Access |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the UltraMobile Imaging Data Breach?
UltraMobile Imaging, a mobile medical diagnostic service based in Rochester, New York, has confirmed a data breach affecting 75,000 people. The company discovered the problem after a network disruption hit some of its computer systems. This disruption led staff to dig deeper into what had actually occurred.
According to the company, unauthorized access to its network occurred in July 2026. The breach notice does not say exactly when the intrusion first began. However, investigators confirmed that an outside party had access to parts of the network for some period of time before detection.
Once the disruption was noticed, UltraMobile Imaging brought in third-party digital forensics specialists to examine the incident. Their review aimed to determine both the scope of the intrusion and which files were affected. As a result of that investigation, the company was able to identify the specific categories of patient information involved.
The forensic work took time to complete, which is common in incidents involving large volumes of medical records. In addition, the company needed to cross-reference compromised files with patient records before it could notify anyone. This process explains the gap between the July intrusion and the October 2026 notification to affected individuals.
Who was affected?
The breach affects patients who received mobile diagnostic imaging services connected to UltraMobile Imaging. Because the company provides mobile testing, its patient base likely spans multiple facilities and referring providers across its service area. This means the affected population could include people from a wide range of locations and medical backgrounds.
UltraMobile Imaging has confirmed that 75,000 individuals were impacted by this incident. The breach notice does not specify whether any affected individuals are minors or whether employees were also involved. Patients who underwent imaging studies, lab work, or related diagnostic services during the relevant time period should assume they could be included.
Because diagnostic imaging referrals often come through other healthcare providers, some affected individuals may not immediately recognize the UltraMobile Imaging name. For this reason, people who have had imaging studies ordered by a physician in the Rochester, New York area should pay close attention to breach notification letters. Even indirect patients of the company could be affected.
What Information Was Potentially Exposed?
UltraMobile Imaging has stated that the following categories of information were likely exposed during the incident. This list reflects what the company’s own data review confirmed, rather than a general estimate of what mobile imaging providers typically hold.
- Names
- Addresses
- Phone numbers
- Dates of birth
- Gender information
- Diagnoses
- Lab test results
- Medications
- Dates of service
- Study IDs
- Procedure types
- CPT codes
- Ordering physician names
- Claims information
- Facility names
- Financial account information
This combination of data creates meaningful risk for identity theft and fraud. Because financial account information was exposed alongside personal identifiers, criminals could attempt to misuse bank or payment details directly. In addition, having a person’s full name, date of birth, and address together makes it easier for a scammer to open new accounts in someone else’s name.
The medical details are also concerning in their own right. Diagnoses, medications, and lab results could be used to craft convincing phishing messages that reference real health details. Furthermore, this type of information can be used in medical identity theft, where someone uses another person’s identity to obtain treatment or submit fraudulent insurance claims. Because claims information and CPT codes were also involved, there is a real possibility that fraudulent billing could be attempted using stolen patient identities.
What is the company doing?
UltraMobile Imaging responded to the discovery of the network disruption by engaging third-party digital forensics experts. These specialists worked to confirm the scope of the unauthorized access and identify which files were involved. As a result of their findings, the company determined which data categories required notification.
Following the investigation, UltraMobile Imaging began notifying affected individuals directly. The company has not indicated that credit monitoring services are being offered to those impacted. Because no such service appears in the notification, affected individuals should take independent steps to protect themselves rather than wait for a company-provided service.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Affected individuals should request copies of their credit reports and review them for unfamiliar accounts or inquiries. This is especially important given that financial account information was part of this breach. Catching suspicious activity early can prevent more serious financial damage down the road.
You can request a free credit report from each of the three major credit bureaus. Reviewing these reports every few months, rather than just once, helps you spot new fraudulent activity as it happens. If you notice anything unusual, report it to the bureau immediately.
Consider a Fraud Alert or Credit Freeze
Because financial account information was exposed, placing a fraud alert or credit freeze is a reasonable precaution. A fraud alert requires lenders to take extra steps to verify your identity before opening new credit. A credit freeze goes further by restricting access to your credit file entirely.
Setting up a freeze is free and can be done directly with each credit bureau. While it adds an extra step when you want to apply for credit yourself, it significantly reduces the risk that someone else can open accounts using your information. This step is particularly worthwhile when financial details have been confirmed as exposed.
Watch for Medical Identity Theft
Given that diagnoses, lab results, and claims information were exposed, patients should watch for signs of medical identity theft. This can include unfamiliar charges on insurance statements or bills for services you never received. Reviewing explanation-of-benefits statements closely can help catch this early.
If you notice a claim or service you don’t recognize, contact your insurance provider right away. In addition, request a copy of your medical records periodically to confirm they accurately reflect your actual care history. Catching errors early makes them easier to correct.
Stay Alert for Phishing Attempts
Because names, dates of birth, and medical details were exposed together, scammers may use this information to craft convincing phishing emails or calls. These messages might reference real diagnoses or procedures to appear legitimate. As a result, recipients should be cautious of any unexpected communication asking for personal or financial details.
Never click links or provide information in response to unsolicited messages, even if they appear to reference accurate medical details. Instead, contact your healthcare provider directly using a known phone number to verify any claims. This simple habit can prevent a lot of downstream fraud.
Consult a Data Breach Attorney
Affected individuals who want to better understand their legal options may benefit from speaking with a data breach attorney. Many offer free consultations to review the specifics of your exposure and discuss whether you may be eligible for compensation. This can also help clarify any deadlines that may apply to your situation.
Because laws and deadlines vary by state, getting personalized guidance sooner rather than later is generally a good idea. An attorney can also help you understand what documentation to keep if you experience fraud linked to this breach.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.