On Feb. 13, 2025, Vital Imaging Medical Diagnostic Centers experienced a major data security incident that resulted in unauthorized activity within its network. A preliminary investigation determined that the protected health information (PHI) and personally identifiable information (PII) of at least 260,000 individuals was exposed.
It is believed exposed information includes names, address, date of birth, health insurance information and medical information. The investigation is ongoing to completely identify all types of data compromised.
The data breach was reported to the U.S. Department of Health and Human Services on Aug. 21, 2025. Vital Imaging published an updated Notice of Security Incident on its website on Aug. 22, 2025.
The cybersecurity incident is considered severe, due to the high number of impacted individuals. Patient PII and PHI are both highly valuable to cybercriminals and can be used in identity theft and fraud.
Vital Imaging reported the incident to law enforcement and is working with cybersecurity experts to further investigate the incident and determine the full extent of the data involved. The organization will notify affected individuals once the data review process is complete.
If you believe your personal and protected health information may have been compromised in this breach:
More information about the organization is available on the Vital Imaging website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.