Expert MRI Listed by pear Ransomware Group

On September 2, 2025, medical imaging provider Expert MRI appeared on the leak site of the pear ransomware group. The company, which specializes in brain, neck, spine, and orthopedic imaging, is claimed to have had internal files exfiltrated during a ransomware attack. Patients whose records passed through Expert MRI facilities now face the possibility that sensitive personal and medical information is in the hands of criminals.

What's Publicly Reported from Reporting

Public reporting indicates that Expert MRI was listed on the pear ransomware group’s public leak site on September 2, 2025. The data consists of internal files exfiltrated after a ransomware deployment. The exact number of affected individuals remains unknown, and the precise contents of the stolen files have not been independently verified by third parties. The leak site is hosted on the dark web and is accessible only through specialized software.

Why This Matters for You and Your Family

When a medical provider loses control of internal files, the information exposed often includes names, addresses, dates of birth, Social Security numbers, insurance details, and clinical notes. For you or your family members who have visited Expert MRI for scans or treatment, this single breach can become the starting point for identity theft, insurance fraud, or targeted scams. Medical data is especially damaging because it can be used to impersonate you when filing false claims or to pressure you with threats of releasing private health details.

Medical records and personal identifiers are among the most valuable datasets on the criminal market. Once they surface in one leak, they tend to spread quickly across underground forums.

The Doxxing and Identity-Chain Implications

A credential or document leak from a healthcare provider rarely stays isolated. Criminals routinely combine exposed emails, phone numbers, and addresses with data from earlier breaches to build detailed profiles. These identity chains can link your professional life, family members’ accounts, and even children’s online gaming profiles. What begins as a medical record exposure can cascade into account takeovers on email, banking, or social media, followed by doxxing attempts that publish your home address or personal relationships.

Gaming accounts belonging to your children are particularly vulnerable in these chains because kids often reuse passwords or email addresses tied to family accounts. A single leak like Expert MRI’s can therefore place both adult and minor household members at risk of harassment or financial fraud.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours rather than months.
• Rotate any password you used when scheduling or accessing records at Expert MRI and enable 2FA through an authenticator app everywhere that password was reused.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that can chain back to the same personal information.
• Let remediation specialists manage takedown requests across data brokers and exposed profiles on your behalf.

The Expert MRI breach is a reminder that healthcare providers remain high-value targets and that your family’s medical history can quickly become public currency for cybercriminals. Taking concrete steps now limits how far the stolen data can travel. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects online handles to real-world identities, and hands-on remediation by specialists who also protect gaming accounts for both adults and children in the household.