Royal Health Inc., a provider of software and services for the radiology sector, experienced a data breach. On July 3, 2025, the company determined that an unauthorized actor may have gained access to documents containing personal information.
Exposed information includes first and last names and Social Security numbers, both of which are considered personally identifiable information (PII). The total number of impacted individuals has not been released, but is believed to be in the thousands. Social Security numbers are highly sensitive and can be used for identity theft, making this breach a serious concern for those affected.
Royal Health disclosed the data breach to the Massachusetts Attorney General on Aug. 21, 2025. The organization began notifying impacted individuals by mail on the same day.
In addition to state and federal required disclosures, Royal Health is offering impacted individuals 24 free months of identity theft prevention through Privacy Solutions. Services include credit monitoring through Equifax, credit report and score access, $1 million in identity theft insurance, identity restoration services, and dark web monitoring.
If you receive a notice from Royal Health or your radiology provider about this breach, you may want to:
More information about the company can be found on the Royal Health Inc. website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.