Medstreaming Data Breach Exposes PII & PHI

Picis Clinical Solutions, Inc., doing business as Medstreaming, recently reported a data breach exposing personally identifiable information (PII) and protected health information (PHI) of potentially thousands of U.S. residents. The data breach was reported to the Attorney General's office in Massachusetts on Jan. 5, 2025, and the U.S. Department of Health and Human Services on July 11, 2025.

On or about May 13, 2025, Medstreaming became aware of unusual activity on certain systems within its network. A subsequent investigation determined that its systems were accessed by an external threat actor. The breach involved sensitive information managed by the company’s clinical workflow and imaging solutions.

While specific technical details about the breach’s origin have not been made public, the event is considered significant due to the nature of the information potentially exposed. The affected data may include PII and PHI such as names, dates of birth, medical record numbers, clinical documentation, imaging data, and possibly additional health-related details. Given the types of data involved, the breach could present risks of identity theft or misuse of sensitive health information.

Medstreaming’s response

Following discovery of the breach, Medstreaming took steps to notify affected individuals and the appropriate regulatory authorities. The company has been working with cybersecurity professionals to investigate the incident, secure its systems, and prevent further unauthorized access. The company is also offering impacted individuals complimentary credit monitoring through Experian.

If you receive notification from Medstreaming or your provider about this breach, you may want to:

• Sign up for the free Experian credit monitoring services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

For affected individuals with questions, Medstreaming has set up a call center at 833-918-9283, Monday through Friday, 8 a.m. to 8 p.m. CT.