Central Kentucky Radiology Under Investigation for Data Breach of Nearly 167,000 Patient Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach impacting the sensitive personal and health information of 166,953 patients whose data was in the possession of Central Kentucky Radiology (CKR), a Kentucky-based radiology services provider.

On October 18, 2024, CKR became aware of suspicious activity that disrupted its network environment. The unauthorized actor had access to CKR’s data systems between October 16, 2024 and October 18, 2024.  

Although the breach occurred in October 2024, CKR did not begin notifying impacted individuals until on or around June 13, 2025, which may have violated state and federal laws. The following personal and health information may have been stolen in the breach: names, dates of birth, addresses, Social Security numbers, medical service dates, and service charges. If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to CKR’s cybersecurity practices.

If you received notification of this data breach or are a patient of CKR and wish to obtain additional information about your legal rights, please fill out the form below.