Ultramobile Imaging Data Breach

Ultramobile Imaging says an unauthorized party accessed its network for a period of time starting around July 30, 2026. The information involved may include Social Security numbers, medical diagnoses and financial account details.

How the Ultramobile Imaging Network Disruption Happened

Ultramobile Imaging (UMI) is a mobile diagnostic imaging company based in Rochester, New York. It brings X-ray, vascular and cardiac studies to patients across Western New York.

According to the company’s Notification of Data Security Incident, UMI experienced a network disruption on or around July 30, 2026 that affected certain systems. UMI says it secured its network and hired outside computer forensic specialists to investigate.

That investigation found that information stored on UMI’s network was subject to unauthorized access for a limited period of time. UMI states that a limited amount of protected health information may have been involved. The company posted its notice on its website under the date September 25, 2026, and says its review of the affected data is still ongoing.

The notice does not say whether anyone has misused the information. It does not name who was behind the access or say whether data was copied or removed.

Why This Breach Hits Vulnerable Patients

UMI’s patients are often people who cannot easily travel to a hospital. According to the company’s website, UMI serves skilled nursing facilities, assisted living communities, group homes, physician clinics and patients in their own homes.

Many people in these settings rely on family members or caregivers to manage their mail, bills and accounts. A notice letter or a suspicious bill may go unnoticed unless someone is watching for it.

The data mix adds to the risk. The notice lists Social Security numbers, driver’s licenses and financial account information alongside diagnoses, medications and insurance claims details. Criminals can use that combination for both financial identity theft and medical identity theft.

UMI has not disclosed the total number of people affected in its notice.

What Information Was Exposed?

According to the notice, the information involved varies by person. It may include a name plus one or more of the following:

• Name
• Address and phone number
• Date of birth
• Race and gender
• Social Security number
• Driver’s license
• Financial account information
• Diagnosis, lab results and medications
• Dates of service, Study ID and procedure type
• CPT codes (billing codes that describe a medical procedure)
• Ordering physician and facility name
• Claims information

What Is Ultramobile Imaging Offering Affected Individuals?

UMI’s website notice does not mention free credit monitoring or identity protection services. It does not name a monitoring vendor, a length of coverage or an enrollment deadline. Individual letters may include more details, so recipients should read their letter closely.

The notice lists a toll-free call center for questions, open Monday through Friday, 8 a.m. to 8 p.m. Eastern Time. It also points readers to free credit reports, fraud alerts and credit freezes from the three credit bureaus.

Your Health and Financial Information Is at Risk

A stolen card number can be canceled. A diagnosis, a medication list or a Social Security number cannot. Medical identity theft happens when someone uses another person’s identity to get care, buy prescriptions or file insurance claims. It can leave false entries in a patient’s medical record and unpaid bills in their name.

Affected individuals, and family members who help manage a loved one’s affairs, should:

• Read the notice letter and call the number it lists with any questions
• Place a free credit freeze with Equifax, Experian and TransUnion
• Review bank statements and insurance Explanation of Benefits forms for unfamiliar activity
• Watch for phishing calls, emails or letters that mention Ultramobile Imaging

Do You Have Legal Options?

Healthcare providers that collect patients’ medical records, Social Security numbers and financial details have a legal obligation to safeguard that information. When that obligation is not met, affected individuals may have legal rights and remedies.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. 

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

FAQ

How many people were affected by the Ultramobile Imaging data breach?

Ultramobile Imaging has not stated a total in its website notice. Its review of the affected data is still ongoing.

What information was exposed in the breach?

It depends on the person. According to the notice, it may include your name plus:

• Address, phone number, date of birth, race and gender
• Social Security number and driver’s license
• Financial account and claims information
• Diagnosis, lab results and medications
• Imaging details such as Study ID, procedure type, CPT codes, ordering physician and facility

When did the Ultramobile Imaging incident happen?

UMI says the network disruption happened on or around July 30, 2026. Its website notice is dated September 25, 2026, about eight weeks later. The notice does not say exactly when UMI confirmed that patient information was involved.

What should I do if I received a notification letter?

• Keep the letter and check it for any offer of credit monitoring
• Freeze your credit with all three credit bureaus
• Check your bank statements and insurance Explanation of Benefits forms

I manage a parent’s affairs. What should I watch for?

Check their mail for bills or insurance notices for care they did not receive. A credit freeze is free and can be placed for an adult family member with the right authority. Report anything unusual to their insurer and bank right away.

How do I avoid scams that mention the breach?

Criminals often send fake messages that name a recent breach. Do not click links or share personal details. Contact the company using a phone number you trust, such as the one printed in your letter.

Do I have a legal claim?

Healthcare providers have a duty to protect your medical and personal information and to tell you promptly when it is exposed. If you received a letter from Ultramobile Imaging, you may have rights. Contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.