Notice of Compumedics USA Data Security Incident

Compumedics USA Inc. (“Compumedics”) provides diagnostic and research technologies for sleep disorders, which are used by certain health care providers, including VCU Health System Authority (“VCU Health”), for the administration of sleep studies. Compumedics experienced a data security incident that involved information for patients of certain health care providers, including VCU Health.

On May 13, 2025, Compumedics completed its investigation of, and data analysis for, the incident that disrupted the operations of Compumedics’  Information Technology systems. After initially identifying the incident on March 22, 2025, Compumedics immediately took steps to secure their systems and contain the incident. They also began an investigation with the assistance of third-party forensic experts and notified law enforcement. The investigation determined that an unauthorized party accessed certain Compumedics systems between February 15, 2025, and March 23, 2025, and reviewed or copied some files.  

Compumedics then conducted a review and analysis of those files, which determined they contained names, dates of birth, demographic information, medical record numbers, treatment and diagnosis information, dates of treatment, provider names, and sleep study details and results. For a subset of the individuals whose information was involved, the files may have also contained their Social Security numbers. Compumedics notified the health care providers, including VCU Health, whose patient information was involved on April 29, 2025.  

We encourage the individuals whose information may have been involved to review the statements they receive from their providers and health insurers. If the statements identify services that were not received, the individual should contact the provider or insurer that issued the statement immediately. Individuals whose Social Security numbers may have been involved are encouraged to enroll in the complimentary credit monitoring services Compumedics is offering.  

We take this incident very seriously and sincerely regret any concern it may cause. To help prevent a similar incident from occurring in the future, Compumedics is implementing additional measures to enhance the security of their network and continue training employees concerning data security.   

Compumedics also established a dedicated, toll-free call center to answer questions about this incident, which can be reached at 877-841-3302, Monday through Friday, 8:00 a.m. - 8:00 p.m. Central Time.

More information regarding the Compumedics incident is available at: https://www.compumedics.com.au/en/notice-of-data-security-incident/