On July 17, 2025, PET Imaging of Dallas Northeast filed an official data breach notice with the Texas Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Texas Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the Texas AG show that PET Imaging of Dallas Northeast confirmed exposure of the information below:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
PET Imaging of Dallas Northeast operates as a specialized diagnostic healthcare provider, delivering advanced medical imaging services such as Positron Emission Tomography scans primarily utilized in oncology, neurology, and cardiology. Because of the critical nature of its clinical operations, the facility routinely collects, processes, and stores an extensive volume of highly sensitive patient information. This repository of data includes not only fundamental demographic details necessary for patient identification and registration, but also detailed clinical histories, physician referral notes, diagnostic scan results, and complex health insurance billing records. The intimate nature of medical diagnostic services means the organization acts as a custodian for some of the most private records an individual can generate, necessitating a rigorous security posture to maintain patient trust and regulatory compliance.
In 2025, PET Imaging of Dallas Northeast reported a significant data security incident to the Texas Attorney General, alerting patients and regulatory authorities that unauthorized actors had gained access to its network environment. While investigations into healthcare cyberattacks frequently reveal sophisticated ransomware deployments, credential harvesting, or vulnerabilities within third-party IT vendor integrations, incidents of this magnitude typically highlight structural weaknesses in network segmentation, endpoint monitoring, or proactive threat detection. For a specialized medical provider, an intrusion of this nature often means that malicious third parties successfully bypassed perimeter defenses to dwell within internal databases containing confidential patient archives for an undetermined period before discovery.
The exposure resulting from the PET Imaging of Dallas Northeast breach encompasses a dangerous amalgamation of Personally Identifiable Information and Protected Health Information. Compromised data elements routinely include full legal names, dates of birth, Social Security numbers, medical record numbers, health insurance policy identifiers, and granular details regarding specific diagnoses, treatments, and clinical provider notes. In the hands of bad actors, this information poses severe, multi-faceted risks. Unlike a standard retail data breach where credit cards can be cancelled, medical data and Social Security numbers cannot be easily altered. Exposed clinical records can be exploited for medical identity theft—where fraudsters obtain healthcare services using a victim's insurance—leading to corrupted medical histories, misdiagnoses, and fraudulent insurance claims that can take years to untangle and correct.
As a healthcare entity handling protected health information, PET Imaging of Dallas Northeast was bound by stringent legal and regulatory mandates under the Health Insurance Portability and Accountability Act and the Texas Medical Records Privacy Act. These statutes require covered entities to implement comprehensive administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronic health data. This includes conducting regular risk assessments, encrypting sensitive databases both at rest and in transit, and maintaining robust access controls. The occurrence of a data breach that compromises vast stores of sensitive patient records serves as a strong indicator that these mandatory security obligations may have been breached, pointing to potential systemic negligence in the organization's data protection infrastructure.
Receiving an official data breach notification letter from PET Imaging of Dallas Northeast carries profound legal significance. It serves as formal, documented admission by the organization that your confidential records were compromised due to inadequate security controls, providing you with the legal standing necessary to participate in a class action lawsuit. Under modern legal standards, affected individuals do not need to wait until they experience actual financial loss or direct medical fraud to seek legal redress; the increased, imminent risk of future identity theft is legally actionable. Our firm is actively investigating potential class action claims against PET Imaging of Dallas Northeast on a contingency fee basis, meaning there is never any out-of-pocket cost or financial risk to you unless we successfully recover compensation on your behalf.
Notification Delay: Approximately 7 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from PET Imaging of Dallas Northeast
You were a customer, patient, employee, or client of PET Imaging of Dallas Northeast
Your personal information was stored in PET Imaging of Dallas Northeast's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the PET Imaging of Dallas Northeast letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Time limits can forfeit your claim. Have attorneys review your PET Imaging of Dallas Northeast case at no cost — contingency means zero upfront fees.
Security Incident
2024-12-13
An unauthorized party accessed PET Imaging of Dallas Northeast systems that stored personal information.
Reported to Attorney General
July 17, 2025
The Texas AG received PET Imaging of Dallas Northeast's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Compensation in a case like PET Imaging of Dallas Northeast's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
States like Texas may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
Other companies have notified the Texas AG of breaches. Received one of these letters as well? You may have more than one claim.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris