Northwest Radiologists (Mt. Baker Imaging) Data Breach — Class Action Review

Northwest Radiologists, operating as Mt. Baker Imaging, is a specialized medical imaging and diagnostic healthcare provider offering critical radiology services, including X-rays, MRIs, CT scans, and ultrasounds. Because medical imaging requires seamless coordination between referring physicians, imaging technicians, radiologists, and insurance payers, the organization routinely collects, stores, and transmits a vast repository of highly sensitive patient information. This data ecosystem encompasses not only standard demographic and billing details, but also intricate clinical histories, diagnostic imaging files, and detailed physicians' notes that are essential for accurate patient diagnosis and ongoing healthcare management.

In 2025, Northwest Radiologists reported a significant cybersecurity incident to the New Hampshire Attorney General, raising serious concerns regarding the protection of patient privacy. In the healthcare sector, breaches of this magnitude typically involve sophisticated cyberattacks such as unauthorized intrusions into centralized electronic health record databases, ransomware deployments that encrypt critical systems, or compromises of third-party vendors and software applications utilized for diagnostic scheduling and image archiving. Regardless of the precise vector, an incident of this nature indicates a critical failure in perimeter defense, network segmentation, or continuous vulnerability monitoring, leaving confidential medical infrastructure exposed to malicious actors.

Patients who receive notification letters from Northwest Radiologists face severe, multi-faceted risks due to the deeply personal nature of the compromised information. Healthcare data breaches routinely expose full legal names, dates of birth, Social Security numbers, health insurance policy identifiers, medical record numbers, and specific diagnostic or treatment documentation. Unlike transient financial data like credit card numbers, medical data cannot be easily reset or replaced. Exposure of this information creates an elevated, long-term risk of medical identity theft—where unauthorized individuals utilize a victim's identity to obtain healthcare services, prescription drugs, or medical equipment—as well as sophisticated phishing schemes designed to exploit patients when they are most vulnerable.

As a healthcare entity handling protected health information, Northwest Radiologists was bound by stringent legal and regulatory standards under the Health Insurance Portability and Accountability Act (HIPAA), as well as applicable state consumer protection laws and the Federal Trade Commission Act. These frameworks mandate rigorous administrative, physical, and technical safeguards, including robust encryption standards, regular risk assessments, and multi-factor authentication protocols. The occurrence of a data breach strongly suggests that these mandated security obligations were not adequately maintained, representing a potential breach of statutory duty and common-law negligence in failing to protect confidential patient records.

For patients who have received a formal data breach notification letter from Northwest Radiologists, this document serves as official legal acknowledgment that their private health and personal information was compromised. Legally, the receipt of this notice establishes standing to participate in a class action lawsuit aimed at holding the organization accountable for its security lapses. Affected individuals do not need to prove that they have already suffered actual financial loss or medical fraud to seek legal recourse; the increased risk of future harm is sufficient. Our firm evaluates these cases on a contingency fee basis, ensuring that affected patients pay no out-of-pocket costs unless we successfully recover compensation on their behalf.