PDI Health Under Investigation for Data Breach of Over 373,000 Patient Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach that led to unauthorized access to the sensitive information of over 373,000 patients of PDI Health, a New York-based mobile diagnostic imaging service provider. 

On May 14, 2025, the ransomware group Everest reportedly published samples of stolen PDI Health data on its dark web site. On June 18, 2025, Everest posted all of the stolen data. PDI Health has not confirmed the data breach, notified affected individuals, or posted a notice on its website.

The following information may have been compromised in the breach: names, Social Security numbers, dates of birth, billing information, electronic medical records (EMRs), test results, and medical history.

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to monetary damages and an injunction requiring changes to PDI Health’s cybersecurity practices.

If you received notification of this data breach or are a patient of PDI Health and wish to obtain additional information about your legal rights, please fill out the form below.