Consulting Radiologists, Ltd.

NOTICE: If you received a NOTICE OF DATA BREACH letter from Consulting Radiologists, Ltd., contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.

On June 14, 2024, Consulting Radiologists, Ltd. (“CRL”) reported a cybersecurity incident (“Data Breach”) to both Offices of the Attorney General in California and Maine. The breach itself occurred on February 12, 2024, during which an unauthorized third-party actor accessed certain files within CRL’s internal network. A subsequent investigation that concluded on April 17, 2024, identified individuals whose sensitive information was compromised.

Since June 14, 2024, CRL has begun sending out data breach notification letters to those impacted by the incident. These notification letters offer a one-year complimentary membership to a credit monitoring service.

As the Data Breach was only recently announced, the company has not yet disclosed further details. According to its report to the Maine Office of the Attorney General, approximately 511,947 individuals may have been impacted by the Data Breach. If you received a Breach Letter from CRL, it means you were affected by the Data Breach.

Headquartered in Eden Prairie, MN, Consulting Radiologists, Ltd. is a physician-owned practice that has been serving patients and providers throughout the Upper Midwest of the United States for more than 90 years. With 75 board-certified radiologists, CRL provides a complete range of radiology services to over 100 healthcare facilities in Minnesota and surrounding areas.

WHAT INFORMATION IS INVOLVED?

The type of compromised information varied among individuals and potentially included:

• Full Names
• Social Security Numbers (SSNs)
• Addresses
• Dates of Birth
• Health Insurance Information
• Other Medical Information

This information is referred to as your Personally Identifiable Information (“PII”). It provides critical details about you and is an integral part of your identity. Businesses are legally required to protect this information, or they risk incurring statutory penalties and other legal repercussions. When PII is stolen, it can be used by identity thieves to commit fraudulent activities using your identity.

The compromised information also includes your Protected Health Information (“PHI”), a specific type of PII. It is protected under both state and federal law. Healthcare providers and other businesses that handle PHI are required to protect that information. Like stolen PII, stolen PHI can be used by identity thieves to engage in fraudulent activity using your identity. Quite often, PII and PHI are used in conjunction by hackers.

The best way to protect yourself after a data breach is to sign up for credit and identity protection services as soon as possible. California offers extra protections and legal rights to its residents through the California Consumer Privacy Act (“CCPA”).

NOTICE: If you received a NOTICE OF DATA BREACH letter from Consulting Radiologists, Ltd., contact the Arnold Law Firm at (916) 777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.