Assocd. Radiologists of the Finger Lakes Data Breach Exposes Patient Information

On Dec. 29, 2025, Associated Radiologists of the Finger Lakes, P.C. (ARFL) disclosed a data security incident that may have affected patients and employees. The breach was discovered after suspicious activity was detected on certain systems within ARFL’s computer network on Oct. 30, 2025.

In response, portions of the network were promptly taken offline, and third-party cybersecurity specialists were engaged to investigate the event. The investigation determined that an unauthorized party gained access to a subset of ARFL’s network between Oct. 28 and Oct. 30, 2025.

During this brief window, certain files were accessed or copied without authorization. While the full scope of the incident is still being determined, ARFL has stated that the exposed information varies by individual.

According to the Notice of Data Privacy on its website, the types of information potentially involved include personally identifiable information (PII) such as name, address, date of birth, full or partial Social Security number and medical record number, as well as protected health information (PHI) including clinical or treatment details, medical procedure information, medical provider name, prescription information and health insurance information.

The company is conducting a comprehensive and time-intensive review of the impacted files to identify what data was involved and to whom it relates. Direct notification to affected individuals will follow once this process is complete.

ARFL's response

ARFL encourages anyone who may be affected to remain vigilant for potential identity theft or fraud. Individuals are advised to review account statements and monitor credit reports for suspicious activity. ARFL has provided a dedicated assistance line at 607-734-6237, available Monday through Friday, 8 a.m. to 4:30 p.m. Eastern time, for questions or support.

The company also recommends that individuals consider placing a fraud alert or credit freeze with the major credit bureaus. Resources for monitoring credit, placing fraud alerts and filing complaints with the Federal Trade Commission are detailed in the official notice. Individuals who believe their information has been misused should promptly report it to their insurance company, healthcare provider, financial institution or law enforcement.