Four US healthcare data breaches: UltraMobile Imaging (75,000), Artistic Smiles (Nightspire), Parkview Health outage, Express Billing extortion
Four US healthcare organizations disclosed cyber incidents. UltraMobile Imaging (Rochester, New York) confirmed that the protected health information of 75,000 individuals was exposed after a network disruption on July 30, 2026. Artistic Smiles (operated by Lift Dental PLLC, Colorado) reported a breach affecting 3,735 people, and the Nightspire ransomware group claimed it on its dark web leak site. Parkview Health (Indiana) is investigating suspicious network activity that caused a network-wide outage, and Cognitive Behavior Therapy Center (Virginia) was affected by a data theft and extortion incident at its billing vendor Express Billing Systems, with about 1,500 patients impacted.
Detalhes técnicos
- UltraMobile Imaging: Network disruption on July 30, 2026. Third-party forensics confirmed unauthorized access to parts of the network for a limited time. The date of first compromise is not stated. Exposed data likely includes names, addresses, phone numbers, dates of birth, gender, diagnoses, lab results, medications, dates of service, study IDs, procedure types, CPT codes, ordering physician names, claims information, facility names and financial account information. Credit monitoring does not appear to have been offered.
- Artistic Smiles / Lift Dental PLLC: Intrusion detected around June 21, 2026. Attacker access ran from June 14 to June 21, 2026. Exposed data includes names, addresses, dates of birth and medical and dental treatment information. It is unclear whether ransomware was deployed, but Nightspire listed the victim on its leak site.
- Parkview Health: On October 19, 2026 the health system reported suspicious network activity and a network-wide internet outage that took down MyChart and other online services. MyChart and Find a Doctor have been restored, while video visits and billing remain unavailable. Data exposure has not been confirmed.
- Cognitive Behavior Therapy Center / Express Billing Systems: The vendor discovered unauthorized network access on August 24, 2026 and determined that files with patient data were copied. Exposed data includes names, addresses, phone numbers, Social Security numbers, diagnoses and service information. Some patients were contacted directly by the threat actor in an attempt to extort money.
Remediação
Express Billing Systems says it has strengthened security and is providing additional staff training to identify phishing attempts. Affected individuals are being notified. Defenders should review third-party billing and vendor risk, and affected patients should monitor for fraud and extortion attempts.
Linha do tempo
-
Four US healthcare data breaches: UltraMobile Imaging (75,000), Artistic Smiles (Nightspire), Parkview Health outage, Express Billing extortion
ler a análise desta fonte ocultar
Four US healthcare organizations disclosed cyber incidents. UltraMobile Imaging (Rochester, New York) confirmed that the protected health information of 75,000 individuals was exposed after a network disruption on July 30, 2026. Artistic Smiles (operated by Lift Dental PLLC, Colorado) reported a breach affecting 3,735 people, and the Nightspire ransomware group claimed it on its dark web leak site. Parkview Health (Indiana) is investigating suspicious network activity that caused a network-wide outage, and Cognitive Behavior Therapy Center (Virginia) was affected by a data theft and extortion incident at its billing vendor Express Billing Systems, with about 1,500 patients impacted.
Technical Details
- UltraMobile Imaging: Network disruption on July 30, 2026. Third-party forensics confirmed unauthorized access to parts of the network for a limited time. The date of first compromise is not stated. Exposed data likely includes names, addresses, phone numbers, dates of birth, gender, diagnoses, lab results, medications, dates of service, study IDs, procedure types, CPT codes, ordering physician names, claims information, facility names and financial account information. Credit monitoring does not appear to have been offered.
- Artistic Smiles / Lift Dental PLLC: Intrusion detected around June 21, 2026. Attacker access ran from June 14 to June 21, 2026. Exposed data includes names, addresses, dates of birth and medical and dental treatment information. It is unclear whether ransomware was deployed, but Nightspire listed the victim on its leak site.
- Parkview Health: On October 19, 2026 the health system reported suspicious network activity and a network-wide internet outage that took down MyChart and other online services. MyChart and Find a Doctor have been restored, while video visits and billing remain unavailable. Data exposure has not been confirmed.
- Cognitive Behavior Therapy Center / Express Billing Systems: The vendor discovered unauthorized network access on August 24, 2026 and determined that files with patient data were copied. Exposed data includes names, addresses, phone numbers, Social Security numbers, diagnoses and service information. Some patients were contacted directly by the threat actor in an attempt to extort money.
Remediation
Express Billing Systems says it has strengthened security and is providing additional staff training to identify phishing attempts. Affected individuals are being notified. Defenders should review third-party billing and vendor risk, and affected patients should monitor for fraud and extortion attempts.