SimonMed Imaging, a major U.S. outpatient radiology and medical imaging provider, suffered a ransomware attack in January–February 2025, compromising 1.2 million patients' sensitive data. The Medusa ransomware group exfiltrated over 200 GB of data, including patient IDs, financial records, medical scans, identity documents, payment details, and raw imaging files. Attackers demanded $1 million to delete the data or $10,000/day to delay publication. The breach exposed highly sensitive information prone to financial fraud, identity theft, and insurance scams, with long-term risks due to the irreversible nature of leaked medical records. SimonMed offered credit monitoring but did not confirm ransom payment. The scale and data type elevate this to a high-severity incident with severe reputational, financial, and operational consequences.