Radiology service provider Central Kentucky Radiology (CKR) is notifying approximately 167,000 individuals that their personal data was leaked during a breach that occurred in October 2024.
See also: McLaren Health Care breach affected 743,000 people
According to the organization, the incident was detected when certain systems on its network malfunctioned due to a cyberattack.
CKR found that a malicious actor accessed its network between October 16 and 18, 2024, and copied files from its systems.
On May 7, 2025, the agency completed its review of the intercepted information and found that it included personal data such as: names, addresses, dates of birth, social security numbers, dates of medical services provided, and service charges.
See also: Oxford City Council: Employee data breach
Central Kentucky Radiology says it notified relevant authorities and law enforcement agencies of the breach and on June 13 began sending written notifications to affected individuals.
The healthcare provider informed the U.S. Department of Health and Human Services that 166,953 people were affected by the incident. CKR is offering those affected free credit monitoring services for 12 months.
The organization has not disclosed details about the type of cyberattack it suffered, but the network outage suggests ransomware may have been involved . So far, no known ransomware group has been identified to claim responsibility for the incident.
See also: 161,000 people affected by Krispy Kreme data breach
The Central Kentucky Radiology (CKR) incident is yet another example of the growing number of cyberattacks on the healthcare sector, which is often a target due to the sensitive nature of the data it handles. The fact that nearly 167,000 people had their personal information – such as Social Security numbers, dates of birth and medical information – leaked highlights the need to strengthen cybersecurity in healthcare organizations.
Source: securityweek
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
