Breachesby GlyphSimonMed Imaging
Disclosed Mar 27, 20251,275,669 affectedConfirmed
Medusa ransomware breach at SimonMed exposes 1.28 million patients
Radiology provider SimonMed said hackers had network access between January 21 and February 5, 2025, learned of it January 27 from a vendor, and the Medusa gang claimed 212 GB and demanded $1 million. It reported 1,275,669 affected people to HHS.
What is known
| People affected | 1,275,669 (as reported by the organization) |
|---|---|
| Disclosed | Mar 27, 2025 |
| Discovered | Jan 27, 2025 |
| Happened | Jan 21, 2025 |
| Attack | Ransomware |
| Data exposed | NamesAddressesDates of birthHealthInsuranceGovernment IDsSocial Security numbersPayment cardsFinancial |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: SimonMed ImagingSimonMed says 1.2 million patients impacted in January data breachLargest Healthcare Data Breaches of 2025Texas Attorney General data security breach report BR-0004609: SimonMed ImagingVermont Attorney General: 2025-10-10 SimonMed Imaging Data Breach Notice to ConsumersIndiana Attorney General 2025 data breach report: SimonMed ImagingHHS OCR breach report (archive, resolved): SimonMed Imaging (Healthcare Provider, AZ)
Notices filed
History of this record
2025-10-10 to 2025-03-27by backfillSource
empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource
empty to https://ago.vermont.gov/document/2025-10-10-simonmed-imaging-data-breach-notice-consumersby backfillSource
["names","addresses","dob","health","insurance","government-id"] to ["names","addresses","dob","health","insurance","government-id","ssn","payment-card","financial"]by backfillSource
unknown to ransomwareby seedSource
[] to ["names","addresses","dob","health","insurance","government-id"]by seedSource
empty to organizationby seedSource
empty to 1275669by seedSource
empty to 2025-01-27by seedSource
empty to Radiology provider SimonMed said hackers had network access between January 21 and February 5, 2025, learned of it January 27 from a vendor, and the Medusa gang claimed 212 GB and demanded $1 million. It reported 1,275,669 affected people tby seedSource
empty to Medusa ransomware breach at SimonMed exposes 1.28 million patientsby seedSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.