Expert MRI Data Breach: What Patients Need to Know

Expert MRI, a medical imaging provider, has notified patients of a data security incident in which an unauthorized actor gained access to and copied files containing personal and protected health information. If you received a notice from Expert MRI about this incident, your sensitive information may have been compromised — and you may have legal rights.

What Happened?

On September 2, 2025, Expert MRI identified evidence of potential unauthorized access to its systems. The organization promptly launched an extensive investigation, took steps to secure its network, and reported the event to federal law enforcement. Through the investigation, Expert MRI determined that an unknown actor gained access to and copied certain files between August 14, 2025 and August 24, 2025.

Expert MRI then conducted an extensive review of the impacted files to determine what sensitive information may have been affected and to identify the individuals involved. Upon completing this review, Expert MRI reported the breach to the California Attorney General on March 23, 2026, and proceeded to mail notification letters to affected individuals.

What Information Was Exposed?

According to Expert MRI’s official notice, the types of protected health information present in the affected files include:

  • Full name
  • Date of birth
  • Driver’s license or state identification number
  • Additional personal information, which varies by individual and is identified in each recipient’s notification letter

If you received a notification letter, the specific information that may have been involved in your case is described within that letter.

What Is Expert MRI Doing?

Expert MRI has reviewed its existing policies and procedures and added additional safeguards to reduce the risk of future incidents. As an added precaution, Expert MRI is providing affected individuals with access to complimentary credit monitoring and identity restoration services through Epiq Privacy Solutions, including single-bureau credit monitoring with alerts, dark web monitoring, credit protection assistance, change of address monitoring, and identity restoration services.

Your Rights as an Affected Individual

Data breaches involving medical providers are governed by HIPAA and California privacy law. If your information was exposed in the Expert MRI data breach, you may be entitled to compensation for:

  • The unauthorized access and copying of your personal and protected health information
  • Costs associated with credit and identity monitoring
  • Actual financial losses resulting from identity theft or fraud
  • Emotional distress caused by the exposure of your information

Contact Wilshire Law Firm for a Free Consultation

If you received a notification from Expert MRI about this data breach, Wilshire Law Firm wants to hear from you. Our experienced legal professionals offer free, confidential consultations.

We take no fees unless you get paid.

Contact us online to speak with a legal professional today.

By submitting this form, you knowingly, voluntarily, and expressly consent to receive from Wilshire Law Firm telephone calls, emails, and SMS text messages, including those made using an automatic telephone dialing system (auto-dialer), artificial intelligence (AI), and/or pre-recorded or artificial voice messages, at any time, including outside of business hours (8:00 a.m. PST – 9:00 p.m. PST). These communications are for the purpose of providing prompt consultation regarding your potential case. You understand that by providing your telephone number, you are granting permission to be contacted for this purpose, even if your number is on a federal or state Do-Not-Call registry. Consent is not required as a condition of retaining Wilshire Law Firm. Message and data rates may apply. You may revoke your consent to receive text messages at any time by replying 'STOP' to any message. For more information, please refer to our Privacy Policy.

FEATURED ATTORNEYS

LET US HELP

Name

By submitting this form, you knowingly, voluntarily, and expressly consent to receive from Wilshire Law Firm telephone calls, emails, and SMS text messages, including those made using an automatic telephone dialing system (auto-dialer), artificial intelligence (AI), and/or pre-recorded or artificial voice messages, at any time, including outside of business hours (8:00 a.m. PST – 9:00 p.m. PST). These communications are for the purpose of providing prompt consultation regarding your potential case. You understand that by providing your telephone number, you are granting permission to be contacted for this purpose, even if your number is on a federal or state Do-Not-Call registry. Consent is not required as a condition of retaining Wilshire Law Firm. Message and data rates may apply. You may revoke your consent to receive text messages at any time by replying 'STOP' to any message. For more information, please refer to our Privacy Policy.