Radiology Associates of Albuquerque

Radiology Associates of Albuquerque, operating also under the name RAA Imaging, is a radiology practice headquartered in Albuquerque, New Mexico, United States.
The organization’s core activity is providing diagnostic imaging services that support physicians in evaluating patient health and guiding medical decisions.
These services are delivered to individuals who receive imaging orders from referring healthcare providers within the local community.
As a covered entity under U.S. federal law, the practice must adhere to the Privacy and Security Rules of the Health Insurance Portability and Accountability Act (HIPAA) when handling protected health information.
The practice’s operations emphasize the accurate capture and interpretation of imaging data while maintaining safeguards for patient confidentiality and data integrity.
While specific metrics such as patient volume or staff count are not disclosed in the available sources, the organization functions as a local provider of radiological care within New Mexico’s healthcare landscape.
Its role contributes to the broader diagnostic workflow that assists in the detection, monitoring, and treatment of various medical conditions.

On December 22, 2020, Radiology Associates of Albuquerque disclosed a cybersecurity incident involving unauthorized access to employee email accounts that had persisted for several months prior to detection.
The intrusion exposed a range of protected health information, including patients’ names, contact details, Social Security numbers, medical histories, treatment specifics, insurance data, and other PHI elements stored within the compromised email systems.
Upon identifying the unauthorized activity, the organization promptly secured the affected email accounts, initiated a forensic investigation to determine the scope of the breach, and began notifying individuals whose information may have been accessed.
The breach was reported by HealthITSecurity, which noted that the incident led to recommendations for affected individuals to monitor their financial and medical account statements for signs of identity theft or fraudulent activity.
In response to the incident, the practice implemented additional technical and administrative controls aimed at strengthening email security, such as enhanced authentication measures and improved monitoring of account access.
The event highlights the persistent cybersecurity risks faced by healthcare organizations that manage sensitive patient data and underscores the importance of robust incident response procedures.
Although the available information does not detail any regulatory penalties or long‑term operational changes resulting from the breach, the incident remains a documented example of a PHI exposure affecting a New Mexico‑based radiology practice.