Northwest Radiologists has confirmed a significant data breach that compromised the personal information of approximately 348,000 Washington State residents.

The incident, which occurred between January 20 and January 25, 2025, caused a major network disruption. Upon discovering the breach on January 25, the organization promptly engaged law enforcement and third-party cybersecurity experts to investigate the scope and impact of the intrusion.

The investigation revealed that unauthorized actors accessed sensitive data during the five-day window. Exposed information may include individuals’ names along with addresses, phone numbers, dates of birth, email addresses, Social Security numbers, state ID or driver’s license numbers, medical and treatment details, insurance data, and billing information. Although Northwest Radiologists noted there is no current evidence that the compromised data has been misused, they are contacting affected individuals and offering free credit and identity protection services.

While the company has not disclosed the specific nature of the cyberattack, the disruption to its systems suggests the possibility of a ransomware incident. No threat actor group has claimed responsibility. In response, Northwest Radiologists has implemented additional security measures to protect its systems going forward and reaffirmed its commitment to safeguarding patient information.