Did You Receive a Data Breach Notice from PDI Health?
Data Breach · Investigation

PDI Health Data Breach — 373,000 Patient Records Exposed

Published July 21, 2025

If you got a data breach notice from PDI Health, your medical, billing and personal information may have been exposed when a hacker group leaked roughly 373,000 patient files in June 2025.

PDI Health data breach investigation

What's the PDI Health Data Breach?

Did you receive a data breach notice from PDI Health? If so, you may be owed potentially substantial compensation.

The PDI Health data breach was a ransomware attack carried out by a hacker group known as Everest. In May 2025, the group claimed responsibility for infiltrating PDI Health's systems and stealing confidential medical and billing records. After the company allegedly failed to pay the ransom, the hackers leaked approximately 373,000 patient files on the dark web in June 2025.

Status Investigation monitoring for a class action or settlement — nothing to file yet
People Affected ~373,000 patient files reportedly leaked on the dark web in June 2025
Data Exposed Medical & Billing Records names, birth dates, possibly SSNs, medical images and insurance records
Proof Required Yes the data-breach notice letter from PDI Health

Who was Affected by the PDI Health Data Breach?

Roughly 373,000 individuals were impacted by the data breach, based on the number of patient records exposed.

The breach affected patients who received mobile diagnostic imaging services from PDI Health, particularly those served at nursing homes, medical offices, or care facilities in the New York area. These services likely occurred before or around May 2025.

The PDI Health data breach may have included the following personally identifiable information exposed to malicious actors:

• Patient medical histories,
• Diagnostic test results,
• Medical images (e.g., X-rays, ultrasounds),
• Billing and insurance records,
• Personally identifiable information (names, birth dates, possibly Social Security numbers).

PDI Health is a full-service clinical laboratory headquartered in Edison, New Jersey. The company was founded in 2018 and employs approximately 50 people. It provides diagnostic testing services, primarily blood work, to a variety of healthcare organizations across New Jersey, New York, and Pennsylvania. The lab performs in-house testing and also works with reference labs to deliver results to physicians and care facilities.

How Do I Qualify?

If you received a notice informing you of the PDI Health data breach — or if you believe your information may have been compromised — you may be eligible for compensation should a class action or settlement move forward. Use the links below to learn more, and browse currently open, claimable data breach settlements further down this page.

Data breaches are serious matters that can cause long-term damage. Hackers break into networks so that they can steal your personal information to sell it on the dark web, commit identity theft, financial theft, or other frauds.


For more open class actions keep scrolling below.

More on Data Breach Settlements & Investigations