Pacific Imaging Management, LLC dba Radiology Associates of San Luis Obispo, experienced a data breach affecting at least 13,158 individuals. On On March 13, 2025, the healthcare organization detected unusual activity in certain employee email accounts.
An investigation was launched and it was determined that an unauthorized actor gained access to internal email accounts between Feb. 3, 2025, and March 17, 2025. The data breach compromised both personally identifiable information (PII) and protected health information (PHI).
Exposed information may include names, addresses, dates of birth, Social Security numbers, driver's license copies, medical records, imaging records and payment information, including card numbers and CVV codes. Pacific Imaging Management disclosed the data breach to the U.S. Department of Health and Human Services on Aug. 25, 2025, reporting a hacking incident.
Radiology Associates of San Luis Obispo began notifying affected individuals by mail on September 10, 2025. The data breach was also reported to the California Attorney General's office on the same day.
After discovering the breach, Radiology Associates changed account passwords and updated its internal policies and procedures to help prevent similar incidents in the future. The organization is also offering affected individuals 12 free months of TransUnion Cyberscout credit monitoring and identity protection services.
The company has also established a dedicated assistance line for questions and support at 1-833-456-5383, Monday through Friday from 5:00am – 5:00pm PT.
If you receive notice from Pacific Imaging Management or Radiology Associates about this breach, you may want to:
Additional details about the healthcare organization can be found on the Radiology Associates of San Luis Obispo website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.