Lumexa Imaging data breach

Clerk's notes

Lumexa Imaging, a diagnostic imaging and radiology provider based in Oregon, officially reported a data breach to the Oregon Attorney General's office on May 15, 2026. The company's IT infrastructure was compromised on March 31, 2026, leading to the unauthorized access of patient data.

The exposed information includes a comprehensive range of sensitive personal and health details. Specifically, the breach involved individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Physician Notes, Home Address, and Phone Number. Such exposure presents considerable risks, from identity theft and fraudulent credit applications to potential medical fraud where stolen health credentials could be misused.

As a healthcare entity, Lumexa Imaging is bound by strict federal regulations like the Health Insurance Portability and Accountability Act (HIPAA), as well as Oregon state data protection laws. These mandates require robust administrative, physical, and technical safeguards to protect patient information. The occurrence of this data breach suggests that these critical security controls may have been inadequate, leaving patient data vulnerable.

If you have received a formal data breach notification letter from Lumexa Imaging, it indicates that your confidential information was compromised due to this security incident. This notification provides a basis for understanding your legal standing as an affected individual.

Understanding your options after a data breach is important. Affected individuals may not need to demonstrate actual financial losses to consider legal action for the increased risks and privacy violations caused by such an incident. We offer complimentary case reviews to help those affected understand their potential next steps without any out-of-pocket costs.

If a notification letter about this breach reached you, see every Oregon data breach on file or browse all cases.