.png)
Central Kentucky Radiology Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Central Kentucky Radiology data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Central Kentucky Radiology
Central Kentucky Radiology is a physician-owned radiology group based in Lexington, Kentucky. The group provides professional imaging interpretation and hospital staffing services for medical centers, hospitals, imaging centers, and physicians’ offices throughout the region.
The team is made up of experienced, board-certified radiologists who cover a wide range of subspecialties, including Vascular & Interventional Radiology, Neuroradiology, Nuclear Radiology, Musculoskeletal Radiology, and Breast Imaging. Central Kentucky Radiology also offers patient billing services separate from hospital charges.
What Happened?
On October 18, 2024, Central Kentucky Radiology discovered a network disruption in its environment. An investigation revealed that, between October 16 and October 18, 2024, an unauthorized actor accessed and copied files from certain systems.
The company completed a detailed review of the affected files on May 7, 2025, and determined that patient billing information was compromised affecting 166,953 individuals. Compromised information included both personally identifiable information (PII) and protected health information (PHI).
The breach was disclosed to the Maine, New Hampshire and Massachusetts Attorney Generals' offices beginning on June 12, 2025. Affected individuals include 20 Massachusetts residents, 8 New Hampshire residents and three Mainers.
Exposed Information:
- Full name
- Address
- Date of birth
- Social Security number
- Date of medical service
- Service charge
The cybersecurity incident was disclosed to the U.S. Department of Health and Human Services on June 13, 2025. Central Kentucky Radiology has published a Notice of Data Security Event on its own website.
Your Rights and Next Steps
If you receive a notice about this data breach from Central Kentucky Radiology, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
Affected individuals have the right to:
- Credit monitoring services: Sign up for the free TransUnion Cyberscout credit monitoring offered by CKR.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
Lawyers are ready to help you understand your rights and guide you through the process of joining a class action lawsuit if you qualify.
You May Be Entitled to Compensation
If your information was compromised in the Central Kentucky Radiology cybersecurity incident, you may be eligible to join a class action lawsuit and seek compensation. This could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Lawyers are investigating this data breach and are prepared to help you take the next steps. To find out if you qualify and to join the lawsuit, complete the below form.
.svg)