HHS OCR report ยท 2025
Vision Upright MRI data breach
OCR report facts
- Covered entity
- Vision Upright MRI
- Entity type
- Healthcare Provider
- State
- California
- Individuals affected
- 23,031
- Submission date
- Mar 10, 2025
- Type of breach
- Unauthorized Access/Disclosure
- Location of breached information
- Network Server
- Business associate present
- No
- Status
- Archive (closed)
OCR description
Vision Upright MRI (CE) reported that it had experienced unauthorized access to its server due to a faulty firewall configuration, resulting in a breach that affected 23,031 patients. OCR has consolidated all issues from this breach into a related investigation and voluntary settlement agreement.
Text as published on the HHS OCR breach portal.
Frequently asked questions
How many people were affected by the Vision Upright MRI data breach?
The report to HHS OCR lists 23,031 individuals affected.
When was it reported to HHS?
It was submitted to HHS OCR on Mar 10, 2025.
What type of breach was it?
The OCR portal lists the type of breach as Unauthorized Access/Disclosure, with the breached information located in: Network Server.
Is the investigation still open?
No. The report is in the OCR portal archive, which holds reports where OCR has closed its review.
Is a breach notice letter from Vision Upright MRI legitimate?
This site cannot verify letters. Check the sender against the organisation's official website and the HHS OCR breach portal, and avoid calling numbers or clicking links only listed in an unexpected message. See our guide on what to do after a data breach notice.
Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Vision Upright MRI.