Radiologic Medical Services, owner of Muscatine Radiology and Corridor Radiology in Iowa, experienced a data breach affecting at least 56,902 patients. On Feb. 26, 2024, the healthcare organization detected suspicious activity involving an employee email account. An investigation revealed that two employee email accounts were accessed by an unauthorized actor between Feb. 22, 2024, and March 19, 2024.
A review took place and determined that sensitive data contained in the hacked email accounts may have been accessed or acquired. This type of cybersecurity incident often compromises both personally identifiable information (PII) and protected health information (PHI).
Exposed information may include names, addresses, dates of birth, Social Security numbers, driver's license or state ID numbers, health insurance information, medical records and payment information. This combination of information can put impacted patients at risk for identity theft and medical fraud.
Radiologic Medical Services disclosed the data breach to the U.S. Department of Health and Human Services on Nov. 12, 2024. The company began notifying affected individuals by mail on Oct. 6, 2025. The cybersecurity incident was also reported to the Vermont Attorney General's office on Oct. 7, 2025.
In response to the data breach, the company secured the affected email accounts and engaged cybersecurity experts. In addition to required state and federal disclosures, Radiologic Medical Services is offering affected patients free credit monitoring and identity protection services.
If you receive a notice from Radiologic Medical Services, Muscatine Radiology or Corridor Radiology, you may want to:
Radiologic Medical Services is a private corporation of seven board-certified radiologists serving the eastern Iowa region since 1971. The company operates Muscatine Radiology and Corridor Radiology, providing a broad spectrum of diagnostic imaging and therapeutic intervention services. Their two imaging centers are designed to deliver high-quality, timely care for imaging patients and referring physicians, serving hospitals, clinics, orthopedic centers and private practices. For more information about their services, visit the Corridor Radiology website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.