New York Attorney General Letitia James secured $450,000 from US Radiology Specialists, Inc. (US Radiology) for failing to protect its patients’ personal and healthcare data. US Radiology partners with and acts as a service provider for facilities throughout the country, including the Windsong Radiology Group, which has six offices across Western New York. An investigation by the Office of the Attorney General (OAG) found that US Radiology did not prioritize upgrading its hardware, which left its network exposed to a known vulnerability, leading to a ransomware attack that affected more than 92,000 New Yorkers. As a result of today’s agreement, US Radiology has agreed to pay $450,000 in penalties to New York, update its IT infrastructure, properly secure its networks, and update its data security policies.
