University Diagnostic Medical Imaging, PC (udmi.net) Listed by fog Ransomware Group

On March 13, 2025, medical imaging provider University Diagnostic Medical Imaging, PC appeared on the leak site of the fog ransomware group after 28.1 GB of internal files were allegedly exfiltrated.

What's Publicly Reported from Reporting

Public reporting indicates the New York-based radiology practice suffered a ransomware intrusion in which attackers copied 28.1 gigabytes of documents before encrypting systems. The fog group published a sample of the stolen material on its dark-web leak page, listing udmi.net as a victim. No exact patient count has been disclosed, but the breached data consists of internal files that almost certainly contain protected health information given the nature of a diagnostic imaging company. The listing carries the standard extortion timeline used by this actor: pay or face full publication.

Why This Matters for You and Your Family

When a medical provider loses control of internal records, the information exposed often includes names, dates of birth, Social Security numbers, addresses, insurance details, and imaging reports. 28.1 GB of internal files is large enough to hold thousands of patient records. If you or any member of your family has visited University Diagnostic Medical Imaging in recent years, your personal health data may now sit on a criminal server. Once that information reaches underground markets, it can fuel identity theft, insurance fraud, or targeted scams that feel deeply personal because attackers know your medical history.

The Doxxing and Identity-Chain Risk

Health data rarely travels alone. A single leaked email or phone number from this claimed breach can be combined with credential leaks from other services to build a complete profile. Attackers chain these fragments together: an old password from a medical portal, a child’s gaming username tied to the same family email, a home address pulled from an imaging consent form. The result is doxxing that escalates from nuisance calls to harassment, swatting, or financial takeover. Credential leaks like this one cascade into account takeovers across unrelated services, which is why protecting gaming accounts matters just as much as securing medical portals.

Fog Ransomware Group Track Record

Public reporting attributes the attack to the fog ransomware group, which emerged in 2024 and has since hit hospitals, schools, and small-to-medium businesses. Notable prior victims include healthcare providers and municipal organizations whose data was published after ransom demands went unpaid. The group’s typical playbook begins with initial access through phishing or exploited remote desktop credentials, followed by rapid exfiltration of sensitive folders, deployment of ransomware, and dual extortion: demand payment to decrypt files and threaten to release the stolen data on their leak site if the victim refuses.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity so you can see exactly what this claimed breach connects to.
• Rotate the password you used at University Diagnostic Medical Imaging anywhere else it appears, then enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next exposure is caught in hours instead of months.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts, which often chain back to the same family address or email.
• Let remediation specialists handle takedown requests across data brokers and leak sites so you do not have to negotiate with threat actors yourself.

The fog listing is a reminder that medical providers remain prime targets and that one breach can quietly feed dozens of future attacks against you and your family. Start your DoxxScan trial today and put continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation specialists between your personal information and the next actor who obtains it. DoxxScan by GalaxyWarden is built for exactly these moments, giving ordinary families the same early-warning and cleanup capability that used to be available only to large organizations.