On September 2, 2022, Buffalo MRI by Windsong Radiology filed an official report with the Attorney General of Montana confirming that the company recently experienced a data breach after an unauthorized party obtained access to sensitive consumer information stored on the company’s computer network. According to Buffalo MRI, the breach resulted in the names, addresses, dates of birth, Social Security numbers, and protected health information being compromised. Recently, Buffalo MRI sent out data breach letters to all affected parties, informing them of the incident and what they can do to protect themselves from identity theft and other frauds.

What We Know About the Buffalo MRI Data Breach

The available information regarding the Buffalo MRI breach comes from the company’s filing with the Attorney General of Montana. According to the AG’s “Reported Data Breach Incidents” page, on December 24, 2021, Buffalo MRI identified a security incident that impacted the functionality of the company’s computer system. In response, Buffalo MRI secured its network, reported the incident to law enforcement, and then enlisted an outside cybersecurity firm to help with the company’s investigation.

As a result of this investigation, it was confirmed that an unauthorized party had gained access to the company’s IT network between December 17 and December 24, 2021. It was also revealed that the portion of the network that was accessible to the unauthorized party contained sensitive patient information.

Upon discovering that sensitive consumer data was made available to an unauthorized party, Buffalo MRI began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, address, date of birth, Social Security number, health insurance information, medical record number, patient account number, physician name, dates of service, and information related to any radiology services you received from Buffalo MRI.

On September 2, 2022, Buffalo MRI sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About Buffalo MRI by Windsong Radiology

Buffalo MRI by Windsong Radiology is a healthcare provider based in Buffalo, New York. The company provides a range of imaging services, including breast cancer screening, MRI services, CT scan services, biopsies, pediatric services, screening services, ultrasound, women’s imaging, X-ray, fluoroscopy & bone density. Buffalo MRI is owned by Windsong Radiology, a larger medical imaging company that is also based in Buffalo, New York. Buffalo MRI employs more than 64 people and generates approximately $13 million in annual revenue. Buffalo MRI’s parent company, Windsong Radiology, employs roughly 302 people and generates $37 million in revenue each year.

If you received a data breach notification, it is essential you understand what is at risk and what you can do about it. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Buffalo MRI data breach, please see our recent piece on the topic here.