Expert MRI expertmri.com Expert MRI data breach: what happened and what to do
An unknown actor copied files from Expert MRI's systems between August 14 and 24, 2025. The company says they held names, dates of birth and possibly driver's license or state ID numbers. Reports citing HHS put the total at 209,560 people.
View all 13,115 breaches- Breach date
- 14 Aug 2025
- Affected
- 209,560
- Data exposed
- Names, Dates of birth, Driver's licenses
- Last updated
What happened
Expert MRI is an imaging provider. On September 2, 2025, it spotted signs of unauthorized access to its systems, brought in investigators and told federal law enforcement. The investigation found that an unknown actor got into the network and copied certain files between August 14 and August 24, 2025.
Then came the slow part. Expert MRI had to read through the copied files to work out whose information was in them and to find missing mailing addresses. It finished that review in 2026 and started sending notice letters, which is why the California Attorney General's list shows the notice in March 2026, months after the intrusion.
What was exposed
The notice letter says the protected health information in the files includes your name, your date of birth and, for some people, a driver's license or state ID number. News coverage of the company's filing with the US health department (HHS) says the total is at least 209,560 people. Those reports also mention clinical details such as diagnosis and treatment information, and Social Security numbers for some people. The letter template leaves the exact data fields to each individual's letter, so your own letter is the one that counts.
A name plus a date of birth and an ID number is enough for someone to try opening accounts in your name. Medical details make phishing more convincing: a message that mentions a real scan or a real clinic is easy to believe.
What the company did
Expert MRI says it secured its network, added safeguards and reported the event to authorities. It offers 12 or 24 months of free credit monitoring and identity restoration through Epiq, depending on the letter. You have to enroll yourself, because the company can't do it for you. It says it has no evidence of identity theft or fraud tied to the event.
What to do if you were in it
- 1
Enroll in the free monitoring if you got a letter
The letter holds your enrollment code. You aren't signed up automatically, and the code has a deadline.
- 2
Freeze your credit
Freeze your credit at Equifax, Experian and TransUnion. It's free, takes a few minutes online per bureau, and stops anyone opening new credit in your name. You can lift it when you need to apply for something.
- 3
Treat messages about your care with suspicion
Be wary of texts, calls and emails that mention a scan, a bill or your insurer. Call the number on your insurance card, not the one in the message.
- 4
Read your insurance statements
Look at explanation of benefits letters for services you didn't receive. Medical identity theft shows up there first.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data shows up, so you hear about new exposures early. It can't remove data from a breach, so the steps above still matter.
Frequently asked
Was I affected by the Expert MRI breach?
If Expert MRI has your details, you should receive a letter by mail. If you were a patient and got nothing, call the number on its website or use a free breach scan to see whether your data turned up elsewhere.
What was exposed in the Expert MRI breach?
The notice lists your name, date of birth and possibly a driver's license or state ID number. Reports citing the HHS filing add diagnosis and treatment details and Social Security numbers for some people.
How many people were affected?
Reports citing Expert MRI's filing with HHS say at least 209,560 people.
Should I freeze my credit?
Yes if your letter lists a Social Security number or an ID number. A freeze is free and doesn't hurt your credit score.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
