Saint Pete MRI Discloses Data Breach Impacts 138k

Saint Pete MRI, a diagnostic imaging and sleep lab in St. Petersburg, Florida, disclosed a data breach that may have involved the personal and protected health information of patients.

A total of 138,209 individuals were determined to have been impacted by the incident, including 107 Massachusetts residents, 86 Indiana residents, 37 New Hampshire residents and nine Vermont residents were impacted.

Saint Pete MRI began notifying potentially impacted individuals on that same date and posted a substitute notice on its website.

On or around Feb. 23, 2025, Saint Pete MRI detected suspicious activity on its network. A forensic investigation that followed confirmed that the company's electronic patient care and imaging systems were not accessed during the incident. However, the investigation found that certain scanned data may have been acquired without authorization.

Following the initial forensic review, a separate comprehensive review of the affected files was conducted to determine what personal information they contained. On April 7, 2026, the review determined that certain personal information may have been included in the affected data.

The company then worked to verify the identities of potentially affected individuals, gather and validate their contact information and assess the full scope of impacted data. According to the company's notification, this verification process was completed on July 15, 2026, roughly 17 months after the initial discovery.

The types of information that may have been involved in the breach include names, Social Security numbers, dates of birth, driver's license numbers or state identification numbers, medical information and health insurance information.

Saint Pete MRI's response

Saint Pete MRI established a toll-free call center for individuals who have questions about the incident or related concerns. The call center can be reached at 1-877-396-3217 and is available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time, excluding major U.S. holidays.