Triad Radiology Associates data breach: what happened and what to do
Triad Radiology Associates in North Carolina notified 11,011 people (per HHS) after someone accessed an employee's email account from July 11 to 30, 2025. Exposed data varies and may include Social Security numbers, bank, medical and health insurance information.
View all 13,177 breaches- Breach date
- 11 Jul 2025
- Made public
- 6 Feb 2026
- Affected
- 11,011
- Data exposed
- Names, Social security numbers, Bank account numbers, Medical information, Health insurance information
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
Triad Radiology Associates (TRA), a radiology group in Winston-Salem, North Carolina, has told patients that an outside party got into an employee's email account in July 2025. The U.S. Department of Health and Human Services (HHS) breach portal lists 11,011 people affected.
What happened
According to AuntMinnie's report, someone had access to the employee's email account between July 11 and July 30, 2025. TRA noticed suspicious activity around July 30. A review finished on December 10, 2025 confirmed that a limited amount of personal information may have been accessible. TRA posted a notice on its website on February 6, 2026 and started mailing letters to affected people on February 11.
Sources checked: auntminnie.com, ocrportal.hhs.gov, consumer.ftc.gov
Last verified against the official page:
What was exposed
It varies by person. For some patients it was only a name and Social Security number. For others it may also include bank account information, medical information or health insurance information.
A Social Security number plus a name is what criminals need to apply for credit in someone's name. Health insurance details can be used for medical identity theft, where someone else gets care billed to your plan.
What TRA says it's doing
TRA says it has no evidence the information has been misused. It is offering 12 months of free credit monitoring and identity protection to affected people.
What to do if you were in it
- 1
Read your notice and sign up for the monitoring
If you got a letter from TRA, it explains what was exposed for you and how to enroll in the 12 months of free credit monitoring it offers. The FTC recommends taking up free monitoring when it's offered.
- 2
Freeze your credit at all three bureaus
A Social Security number was exposed for some patients. Per the FTC, a credit freeze is free and lasts until you lift it. Place it separately at Equifax, Experian and TransUnion.
- 3
Check your insurance statements
Read every explanation of benefits from your health plan. Report care or claims you don't recognize to your insurer.
- 4
Watch your bank accounts
If the letter says bank account information was involved, review your statements and tell your bank about anything you didn't authorize.
- 5
Expect scam calls and texts that mention the breach
Don't click links or give details to anyone who contacts you first. Report identity theft at IdentityTheft.gov, the FTC's reporting site.
- 6
Check whether your email or phone is in other breaches
Run a free scan with Serus to see where else your details have appeared.
Official filings
- U.S. Department of Health and Human Services , filed 6 Feb 2026 : 11,011 people
Timeline
-
The breach happened
-
The company made it public
-
Reported to U.S. Department of Health and Human Services
Frequently asked
Was I affected by the Triad Radiology Associates breach?
TRA is mailing letters to affected people. If you were a patient and got no letter, you can contact TRA directly to ask.
What information was exposed?
It varies by person: for some only a name and Social Security number, for others also bank account, medical or health insurance information.
How many people were affected?
The HHS breach portal lists 11,011 individuals.
Should I freeze my credit?
If your Social Security number was involved, the FTC says a freeze is a free way to block new credit in your name.
Sources
Something wrong or out of date? Tell us and we'll re-check it.