Women's Center for Radiology Data Breach
The 2026 Women's Center for Radiology data breach is a confirmed incident in which certain files on the organization's computer network were accessed or downloaded without authorization. The organization has not publicly disclosed the total number of people affected.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
5 sensitive10- Diagnoses
- Medical information
- Provider names
- Medical record numbers
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Contact information
- Driver's license numbers
About This Breach
Women's Center for Radiology is a healthcare provider in Orlando, Florida offering mammography, ultrasound, MRI, and other medical-imaging services for women. The incident involved files containing personal and health information in a limited part of its network.
How Did the Incident Occur?
According to the official notice, a limited subset of the network was accessed without authorization between April 26 and April 28, 2026, and certain files were accessed or downloaded. The organization detected suspicious activity on April 29, contained the access, and began an investigation with third-party cybersecurity specialists.
What Information Was Affected?
The affected fields vary by person. The disclosed scope includes names, addresses, dates of birth, contact information, diagnoses or medical conditions, lab results, treating or referring physician names, medical record numbers, health-insurance information, and driver's license information if provided during intake. The notice does not say that every category applied to every person.
How Did Women's Center for Radiology Respond?
The organization says it assessed the security of its systems, notified affected people, and informed federal law enforcement and required regulators. It also reviewed its policies and processes and offered potentially affected people complimentary credit monitoring and identity-protection services. At the time of the notice, it reported no indication of identity theft or fraud.
What Should Affected People Do?
Notice recipients should rely on their individual letters for their specific data scope. Health-insurance explanations, medical bills, credit reports, and account activity can be monitored for unfamiliar transactions or errors. Unexpected medical or financial communications should be verified through official channels; if driver's license information was involved, recipients can review replacement or additional protection options with their state licensing agency.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
