Delta Medical Systems Data Breach 2026: 1,574 Healthcare-Imaging-Vendor Customers Exposed. SSN + Bank Accounts in Scope. What To Do

What happened

Delta Medical Systems, Inc. is a family-owned Wisconsin medical imaging equipment vendor founded in 1979, headquartered in Brookfield, WI (Milwaukee metro). The company is a Siemens Healthineers Advanced Partner — exclusively selling and servicing Siemens medical imaging equipment (CT, X-ray, MRI, ultrasound, mammography, surgical) for rural and community hospitals, ASCs, outpatient clinics, and imaging-center startups across WI, MN, IL, and MI.

Delta is not a clinical provider — it is a B2B medical imaging vendor/service organization, so PHI exposure is incidental to its service relationships (likely covered by business associate agreements) plus employee HR data.

On July 15, 2025, Delta detected unusual activity in its email environment (also the date of unauthorized access per forensic findings). The data review was completed in November 2025; identification of affected individuals completed on February 11, 2026. Delta posted a public notice on March 9, 2026 and mailed individual notification letters with HHS OCR submission on March 10, 2026.

Affected count discrepancy:

• HHS OCR: 1,574 individuals (PHI-affected, HIPAA-covered)
• Total per ClaimDepot: 1,869 individuals (includes non-PHI PII, e.g., employees)

The smaller HHS count reflects Delta’s role as a Business Associate to its hospital and clinic customers.

No ransomware group has publicly claimed responsibility. The pattern (Email location, single-day access window) is consistent with business email compromise — credential phishing or token theft.

What was stolen

Per the company notice (varies by individual):

• Full name
• Date of birth
• Social Security number
• Driver’s license / state ID number
• Bank account and routing numbers
• Medical information
• Health insurance information

The combination of SSN + bank account + medical + insurance is a high-severity composite exposure profile.

What Delta Medical Systems is offering

• 12 months complimentary identity protection via TransUnion (single-bureau credit monitoring, credit report access, credit score monitoring)
• Offered to SSN-affected individuals only
• Dedicated toll-free call center
• Network security hardening + third-party forensic engagement

The 12-month duration is below market for breaches with SSN + financial account + medical exposure (24 months is the more common offering for this composite profile).

What to do

1. Enroll in TransUnion identity protection through the activation code in your letter.
2. Place free credit freezes at Equifax, Experian, TransUnion. Single-bureau monitoring leaves gaps — freezes at all three bureaus close them.
3. File IRS Form 14039.
4. Cancel and reissue any payment methods tied to bank account / routing information that was in scope.
5. Watch your bank account closely for unauthorized withdrawals in the weeks after notification — ACH theft can be rapid when routing/account numbers are exposed.
6. Stop the ongoing flow of your imaging-vendor service data. HealthConsent files HIPAA restriction requests covering medical-equipment vendor and service-organization data pathways.

Continue reading

• Your eight HIPAA rights, in plain English
• Other 2026 healthcare data breaches