Lumexa Imaging Reports Data Breach via Third-Party Vendor, Exposing Patient Information Lumexa Imaging, a major U.S. provider of outpatient diagnostic imaging services, disclosed a data breach stemming from unauthorized access to a third-party vendor’s network. The incident occurred between late March and early April 2026, compromising sensitive patient data held by Lumexa’s affiliated radiology practices and imaging centers. The breach was detected on April 9, 2026, when the vendor reported suspicious activity within a network segment dedicated to Lumexa’s operations. Between March 31 and April 9, an unauthorized individual accessed and exfiltrated documents containing patient information. By April 15, Lumexa confirmed that the intruder may have viewed or copied records. Exposed data varied by individual but potentially included names, dates of birth, addresses, phone numbers, Social Security numbers, patient account numbers, insurance details, visit dates, diagnoses, and other radiology-related health information. The total number of affected individuals has not been publicly disclosed, though the breach was reported to the California Attorney General. In response, Lumexa began notifying impacted individuals via mail and is offering free identity monitoring services through Kroll. Affected parties must enroll by a specified deadline using a membership number provided in their notification letter. The company has also established a dedicated call center (844-959-7072) for inquiries, operating Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time. Additional contact details include Lumexa’s Raleigh, NC headquarters at 4200 Six Forks Road, Suite 1000, or by phone at 919-763-1100.