RADIOLOGIC MEDICAL SERVICES, P.C. disclosed a data security incident to the Illinois Attorney General on September 29, 2025, triggering legally mandated notification letters. If you are one of the people who received RADIOLOGIC MEDICAL SERVICES, P.C.'s letter, your data may have been exposed and you could be entitled to compensation.
The Illinois Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Illinois Attorney General filing, the RADIOLOGIC MEDICAL SERVICES, P.C. incident compromised these categories of personal information:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Radiologic Medical Services, P.C. operates as a specialized medical practice focused on diagnostic imaging, radiology, and advanced medical scanning procedures. Because of the critical role diagnostic imaging plays in modern healthcare, the practice routinely collects, processes, and stores an extensive volume of highly sensitive protected health information. This includes not only foundational demographic records necessary for patient identification and insurance billing, but also detailed clinical imagery, radiologist interpretations, diagnostic histories, and physician notes. In order to function efficiently, the practice maintains comprehensive electronic health record systems and digital communication channels linked with referring physicians, hospitals, and third-party billing administrators, creating a vast digital repository of vulnerable medical data.
In 2025, Radiologic Medical Services, P.C. formally reported a significant security incident to the Illinois Attorney General, alerting patients and regulatory authorities to an unauthorized compromise of its network infrastructure. While specific technical forensics often vary in healthcare cyberattacks—frequently involving sophisticated ransomware deployments, credential harvesting, or exploited vulnerabilities in third-party healthcare software vendors—incidents of this nature typically indicate systemic vulnerabilities in network defenses. In the healthcare sector, threat actors aggressively target medical providers because diagnostic practices often lack the enterprise-grade cybersecurity budgets of massive hospital systems, yet they still hold the high-value personal and clinical data required for lucrative illicit activities.
The data compromised in breaches of diagnostic medical providers typically encompasses a dangerous intersection of personal identifiers and private clinical information. Exposed records often feature full legal names, dates of birth, Social Security numbers, home addresses, health insurance policy numbers, unique patient identification numbers, and detailed diagnostic or treatment descriptions. Unlike standard retail breaches where compromised credit cards can simply be cancelled, healthcare data breaches expose immutable personal traits and clinical details that cannot be altered. This exposes victims to severe, long-term risks, including targeted medical identity theft where criminals obtain fraudulent care using the victim's insurance, unauthorized billing for procedures never received, prescription fraud, and sophisticated financial phishing scams leveraging authentic medical context.
As a covered entity handling protected health information, Radiologic Medical Services, P.C. was bound by strict legal and regulatory mandates under the Health Insurance Portability and Accountability Act (HIPAA), as well as applicable Illinois state data protection statutes. These laws require healthcare providers to implement rigorous administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronic patient health data. The occurrence of a data breach capable of exposing sensitive medical and financial records strongly suggests a failure to maintain adequate security controls, encryption standards, or timely patch management, raising serious questions about whether the practice fulfilled its statutory duties to safeguard vulnerable patient populations.
Receiving an official data breach notification letter from Radiologic Medical Services, P.C. serves as formal legal acknowledgment that your confidential information was compromised as a result of the practice's security failures. Under modern class action jurisprudence, the receipt of such a notification letter establishes legal standing to participate in litigation and pursue accountability, even before actual financial or medical identity theft materializes. Our law firm is actively investigating potential class action claims on behalf of individuals affected by this incident. We evaluate these cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from RADIOLOGIC MEDICAL SERVICES, P.C.
You were a customer, patient, employee, or client of RADIOLOGIC MEDICAL SERVICES, P.C.
Your personal information was stored in RADIOLOGIC MEDICAL SERVICES, P.C.'s systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Do not discard the RADIOLOGIC MEDICAL SERVICES, P.C. letter. It documents your standing as an affected individual — the foundation of any claim you file.
Activate the complimentary credit monitoring referenced in RADIOLOGIC MEDICAL SERVICES, P.C.'s letter — early fraud detection and a documented harm record both help your claim.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Time limits can forfeit your claim. Have attorneys review your RADIOLOGIC MEDICAL SERVICES, P.C. case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
An unauthorized party accessed RADIOLOGIC MEDICAL SERVICES, P.C. systems that stored personal information.
Reported to Attorney General
September 29, 2025
The Illinois AG received RADIOLOGIC MEDICAL SERVICES, P.C.'s formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Breach victims may recover several categories of loss. What applies in the RADIOLOGIC MEDICAL SERVICES, P.C. matter depends on your state, the data involved, and the company's conduct.
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Illinois's Personal Information Protection Act (PIPA) and Biometric Information Privacy Act (BIPA) provide some of the strongest data protection rights in the country. BIPA allows statutory damages of $1,000–$5,000 per violation, and class actions have resulted in substantial settlements.
These organizations also reported breaches to the Illinois Attorney General. If their letters reached you too, each may carry its own claim.
Power Solutions International, Inc
Illinois · Jan 2025
Sunflower Medical Group
Illinois · Jan 2025
Orthominds, Llc (Supplemental)
Illinois · Jan 2025
Healthcare Service Corporation
Illinois · Jan 2025
The Pavilion At Healthpark Llc
Illinois · Jan 2025
Rosecrance Health Network
Illinois · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris