Strauss Borrelli PLLC, a leading data breach law firm, is investigating Pinehurst Radiology Associates (“PRA”), regarding its recent data breach. The PRA data breach may have involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT PINEHURST RADIOLOGY ASSOCIATES:
PRA is an imaging and radiology, physician practice in North Carolina. Founded in 1977, PRA physicians specialize in neuroradiology, abdominal imaging, musculoskeletal imaging, body imaging, breast imaging, and vascular and interventional radiology.3 Additionally, PRA has five outpatient radiology centers in the Sandhills region of North Carolina.3 Headquartered in Pinehurst, North Carolina, PRA employs over 10 radiologists.3
WHAT HAPPENED?
Recently, PRA announced that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on or around January 20, 2025, PRA became aware of suspicious activity within its network environment.1 As a result, PRA launched an investigation to determine the nature of the incident.
On April 7, 2025, PRA finished their review and confirmed that sensitive personal information and protected health information in its systems belonging to PRA patients may have been viewed and copied by an unauthorized third party during the breach. As a result, PRA began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth
- Medical diagnosis and treatment information
- Medical record number
- Health insurance information
- Medicare/Medicaid number
As a result of the breach, PRA posted a notice of the incident on its website and has begun mailing notice letters to impacted individuals.1 Additionally, PRA reported the breach to the Commonwealth of Massachusetts.2 Based on the website breach notice, PRA is providing affected individuals with a list of the specific types of sensitive information impacted and 24 months of complimentary credit monitoring services. A link to the formal breach notification that PRA posted to its website, and to the Commonwealth of Massachusetts is below.
If you received a breach notification letter from Pinehurst Radiology Associates:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
