State records show DOCTORS IMAGING GROUP notified the Illinois Attorney General of a data breach on August 29, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The Illinois Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official Illinois AG notice for DOCTORS IMAGING GROUP identifies the following exposed data:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Doctors Imaging Group operates as a specialized diagnostic healthcare provider, offering advanced medical imaging services such as MRIs, CT scans, X-rays, and ultrasounds to patients across the region. Because diagnostic imaging is a critical bridge between initial patient consultations and specialized treatment plans, the organization routinely collects, processes, and stores vast quantities of highly confidential personal and medical data. This repository includes comprehensive patient registration details, physician referral notes, diagnostic imagery, and detailed billing records necessary to coordinate care with various insurance networks and medical practices. Given the intimate and sensitive nature of diagnostic healthcare, the organization functions as a trusted custodian of some of the most private details of an individual's life.
In 2025, Doctors Imaging Group formally reported a data security incident to the Illinois Attorney General, joining a growing number of healthcare entities targeted by sophisticated cybercriminal networks. Breaches affecting medical imaging providers typically involve unauthorized actors breaching network perimeters, deploying ransomware, or exploiting vulnerabilities in third-party electronic health record and picture archiving and communication systems (PACS). Because medical networks house interconnected databases containing both administrative billing systems and clinical imaging archives, an intrusion of this nature can grant malicious actors deep access to unencrypted digital environments where sensitive files reside.
The exposure resulting from this incident potentially compromises a devastating combination of sensitive information, including full legal names, dates of birth, Social Security numbers, health insurance policy details, medical record numbers, and specific diagnostic and treatment descriptions. The compromise of this data creates severe, long-term risks for affected patients. Unlike a stolen credit card, which can be readily canceled, core identifiers like Social Security numbers and medical histories cannot be changed. Stolen healthcare data can be weaponized by bad actors to commit medical identity theft—where unauthorized individuals obtain prescription drugs, bill insurance companies for fictitious procedures, or alter medical files, potentially endangering a victim's actual medical treatment and health insurance standing.
As a healthcare entity handling protected health information, Doctors Imaging Group was bound by stringent legal and regulatory frameworks, most notably the Health Insurance Portability and Accountability Act (HIPAA), alongside state common law duties and consumer protection statutes. HIPAA and its accompanying Security Rule mandate that healthcare providers implement robust administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronic protected health information. The occurrence of a significant data breach strongly suggests potential failures or lapses in maintaining adequate network security, encryption protocols, access controls, and timely vulnerability patching, pointing toward possible negligence in fulfilling these statutory and professional obligations.
Receiving an official data breach notification letter from Doctors Imaging Group is a formal acknowledgment that your private information was compromised due to inadequate security measures. Under the law, this notification establishes legal standing to participate in a class action lawsuit aimed at holding the organization accountable for failing to safeguard sensitive data. Importantly, affected individuals do not need to prove that they have already suffered direct financial loss or medical fraud to seek legal recourse; the increased risk of future identity theft and the loss of privacy are actionable injuries. Our firm is actively investigating potential class action claims on behalf of individuals whose data was exposed in this incident, and we handle these cases on a contingency fee basis, meaning there are no out-of-pocket costs or attorney fees unless we successfully recover compensation for you.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from DOCTORS IMAGING GROUP
You were a customer, patient, employee, or client of DOCTORS IMAGING GROUP
Your personal information was stored in DOCTORS IMAGING GROUP's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the DOCTORS IMAGING GROUP letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
DOCTORS IMAGING GROUP typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Deadlines apply to breach claims. A free review of your DOCTORS IMAGING GROUP letter takes minutes, and we only get paid if you do.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in DOCTORS IMAGING GROUP's systems.
Reported to Attorney General
August 29, 2025
DOCTORS IMAGING GROUP's disclosure was logged with the Illinois Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Breach victims may recover several categories of loss. What applies in the DOCTORS IMAGING GROUP matter depends on your state, the data involved, and the company's conduct.
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Illinois's Personal Information Protection Act (PIPA) and Biometric Information Privacy Act (BIPA) provide some of the strongest data protection rights in the country. BIPA allows statutory damages of $1,000–$5,000 per violation, and class actions have resulted in substantial settlements.
The companies below also filed breach notices with the Illinois Attorney General. Letter recipients for any of them can pursue a review.
Power Solutions International, Inc
Illinois · Jan 2025
Sunflower Medical Group
Illinois · Jan 2025
Orthominds, Llc (Supplemental)
Illinois · Jan 2025
Healthcare Service Corporation
Illinois · Jan 2025
The Pavilion At Healthpark Llc
Illinois · Jan 2025
Rosecrance Health Network
Illinois · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris