Radiology provider exposed tens of thousands of patient files

An anonymous source disclosed that stolen credentials from a prior breach were used to access I-MED Radiology's patient portal, exposing patients' full names, dates of birth, sex, scan types and scan dates. The compromised accounts reportedly used very short passwords, lacked two-factor authentication, had credentials publicly available for over a year, and may have been shared among multiple people; I-MED states it is strengthening monitoring and working with cyber experts.