Balance Diagnostics Breach

On May 6, 2025, medical imaging provider Balance Diagnostics in Cedarhurst, New York, was hit by the EVEREST ransomware gang. Initial data samples appeared on dark‑web leak pages immediately, and the full cache-containing about 31,000 records-was released on June 18 after ransom demands went unmet.  
he stolen information was extensive: patients’ test results and histories, plus highly sensitive PII-Social Security numbers, birth dates, emails, phone numbers, home addresses-and billing and insurance records. Such data raises serious risks: identity theft, phishing scams, and fraudulent medical claims.  
  
This attack echoes a larger trend, with EVEREST also targeting similar healthcare providers like PDI Health and Avantic Medical Lab under comparable conditions. These breaches expose systemic weaknesses in healthcare cybersecurity-especially around network security, backups, and staff awareness.  
Under HIPAA, breaches impacting 500+ individuals trigger mandatory HHS and patient notifications, and may lead to audits and fines. Affected individuals should monitor financial and medical records, consider credit safeguards, and stay alert for phishing attempts. Meanwhile, healthcare organizations must bolster defenses: multi‑factor authentication, regular security audits, robust backup protocols, and employee training are critical steps to prevent similar incidents.