Lumexa Data Breach Exposes Medical Records of Butte Residents A recent data breach at Lumexa, a healthcare technology provider, has compromised the sensitive medical records of residents in Butte, Montana. The incident, discovered in early 2024, involved unauthorized access to patient data, including names, addresses, Social Security numbers, and medical histories. The breach appears to stem from a cyberattack targeting Lumexa’s systems, though the exact method of intrusion remains under investigation. While the company has not disclosed the full scope of affected individuals, local health officials confirm that Butte-area patients are among those impacted. Lumexa has notified affected individuals and is working with cybersecurity experts to secure its systems. The breach raises concerns about healthcare data security, particularly in smaller communities where such incidents may have outsized consequences. Authorities are monitoring the situation for potential fraud or identity theft risks.

Lumexa Imaging Reports Data Breach via Third-Party Vendor, Exposing Patient Information Lumexa Imaging, a major U.S. provider of outpatient diagnostic imaging services, disclosed a data breach stemming from unauthorized access to a third-party vendor’s network. The incident occurred between late March and early April 2026, compromising sensitive patient data held by Lumexa’s affiliated radiology practices and imaging centers. The breach was detected on April 9, 2026, when the vendor reported suspicious activity within a network segment dedicated to Lumexa’s operations. Between March 31 and April 9, an unauthorized individual accessed and exfiltrated documents containing patient information. By April 15, Lumexa confirmed that the intruder may have viewed or copied records. Exposed data varied by individual but potentially included names, dates of birth, addresses, phone numbers, Social Security numbers, patient account numbers, insurance details, visit dates, diagnoses, and other radiology-related health information. The total number of affected individuals has not been publicly disclosed, though the breach was reported to the California Attorney General. In response, Lumexa began notifying impacted individuals via mail and is offering free identity monitoring services through Kroll. Affected parties must enroll by a specified deadline using a membership number provided in their notification letter. The company has also established a dedicated call center (844-959-7072) for inquiries, operating Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time. Additional contact details include Lumexa’s Raleigh, NC headquarters at 4200 Six Forks Road, Suite 1000, or by phone at 919-763-1100.