UltraMobile Imaging Identifies Data Breach Impacting 75,000 Individuals
Data breaches have been announced by UltraMobile Imaging in New York, Artistic Smiles in Colorado, Parkview Health in Indiana, and Cognitive Behavior Therapy Center in Virginia.
UltraMobile Imaging, New York
UltraMobile Imaging, a Rochester, New York-based mobile medical diagnostic service provider, has determined that the protected health information of 75,000 individuals was exposed in a data security incident earlier this year. A network disruption was experienced on July 30, 2026, impacting some of its computer systems. Third-party digital forensics experts were engaged to investigate the nature and scope of the incident and confirmed that there was unauthorized access to parts of its network for a limited time. The UltraMobile Imaging website breach notice does not state when its network was first compromised.
UltraMobile Imaging has determined that the information likely exposed in the incident included names, addresses, phone numbers, dates of birth, gender information, diagnoses, lab test results, medications, dates of service, study IDs, procedure types, CPT codes, ordering physician names, claims information, facility names, and financial account information. The affected individuals are now being notified. Credit monitoring services do not appear to have been offered.
Avail of a Free 30-Minute
Cybersecurity Consultation
with Blue Team Alpha
Review your security program, get advice on a specific cybersecurity concern, identify risk-reduction priorities, or take the first step toward your annual HIPAA Security Risk Assessment.
Learn More About This Offer
Artistic Smiles, Colorado
Lift Dental PLLC, the operator of a dental practice in Longmont, Colorado called Artistic Smiles, has identified unauthorized access to its computer systems. The intrusion was identified on or around June 21, 2026, and the forensic investigation determined that an unauthorized third party had access to its network between June 14, 2026, and June 21, 2026.
The data review determined that the information exposed in the incident included names, addresses, dates of birth, and medical and dental treatment information. The data breach was recently reported to the HHS’ Office for Civil Rights as affecting 3,735 individuals. It is not clear if ransomware was involved; however, a ransomware group called Nightspire claimed responsibility for the incident and added Artistic Smiles to its dark web data leak site.
Parkview Health, Indiana
Parkview Health in Fort Wayne, Indiana, is investigating a potential cybersecurity incident. On October 19, 2026, the nonprofit community health system said it recently identified suspicious network activity and experienced a network-wide internet outage that prevented access to the MyChart portal and other online services. Without access to those systems, it was unable to issue appointment reminders.
The MyChart portal and Find a Doctor service have now been restored and can be used again by patients, although video visits are still not available and billing functions have yet to be restored. Staff are working to restore the remaining services as quickly as possible. Parkview Health has not publicly confirmed if patient data was exposed or stolen.
Cognitive Behavior Therapy Center, Virginia
Cognitive Behavior Therapy Center in Chesapeake, Virginia, has been affected by a security incident at one of its third-party vendors – Express Billing Systems. The third-party billing company discovered unauthorized access to its computer network on August 24, 2026, and determined that files containing patient information were copied in the incident. The review of the impacted data confirmed that names, addresses, phone numbers, Social Security numbers, diagnoses, and information related to the services provided. Approximately 1,500 Cognitive Behavior Therapy Center patients are affected.
This was a data theft and extortion incident, and some patients have been contacted directly by the threat actor in an attempt to extort money. Express Billing Systems said it has taken steps to strengthen security to prevent similar incidents in the future and is providing additional training to its staff to help them identify phishing attempts and maintain security.
