Women's Center for Radiology data breach: files downloaded over three days in April 2026

What happened at Women's Center for Radiology?

WCR says it contained the activity and investigated with third-party specialists, then reviewed the files to see what they held and whom they concerned. It notified federal law enforcement and the required regulators.

Date	What the letter and the regulators' records say
April 26 to 28, 2026	Unauthorized access; files accessed or downloaded
April 29, 2026	WCR becomes aware of suspicious activity
June 26, 2026	Letter date; report to HHS (66,422); logged in Massachusetts (18 residents)

From detection to letters took 58 days.

What information was involved?

Women's Center for Radiology's sample letter leaves the list of data items blank; its Nebraska filing gives the list (below). For the 18 Massachusetts residents in Women's Center for Radiology's notice, the state's record marks medical records and driver's licenses as breached, and not Social Security numbers. WCR says it has no indication of identity theft or fraud.

What is WCR offering?

Item	Detail from the letter
Service	12 months of credit monitoring and identity protection
Provider	Cyberscout, a TransUnion company
Questions	844-507-8933, Monday to Friday, 8 a.m. to 8 p.m. EST, excluding major U.S. holidays; or by mail at 1621 N. Mills Ave., Orlando, FL 32803

WCR says it cannot enroll anyone on their behalf. The guide to credit monitoring offers sets Women's Center for Radiology's offer beside other letters.

What information was involved in the Women's Center for Radiology breach?

WCR's notice to Nebraska's attorney general fills in what the sample letter leaves blank: name, address and driver's license, if the patient gave one at intake. That fits the Massachusetts record, which marks driver's licenses and medical records as breached and Social Security numbers as not. The notice says the list varies by person.

The same notice adds that WCR was posting notice on its website and telling prominent media in Florida, where most of its patients live.

What did WCR tell regulators?

The Nebraska filing, sent on or about June 26, 2026 for one Nebraska resident, confirms the timeline in the letter: suspicious activity found on April 29, 2026, and access to a limited subset of the network between April 26 and April 28, with files accessed or copied. It says WCR notified federal law enforcement, is updating its policies and procedures, and is offering twelve months of credit monitoring through CyberScout at no cost. It also says WCR notified HHS, the three credit bureaus and other state and federal regulators as needed.

Record	What it counts	Number
HHS Office for Civil Rights	People affected	66,422
Massachusetts consumer affairs office	Massachusetts residents	18
Nebraska attorney general	Nebraska residents	1

Was my information in the Women's Center for Radiology data breach?

If you got a letter from WCR dated June 26, 2026, your information was in the files. The CyberScout enrollment code in the letter is the first step; the guide to credit monitoring offers explains what else to do.

What the documents leave open

• How the intruder got into the network.
• Whether the downloaded files have been published.

With 66,422 people, Women's Center for Radiology's report is the 66th largest of the 415 open 2026 reports in the ranking of 2026 healthcare breaches reported to HHS.