United Seating and Mobility, LLC d/b/a Numotion data breach

What we know

United Seating and Mobility, LLC, doing business as Numotion, is a premier national provider of complex rehab technology, custom wheelchairs, and medical mobility equipment designed to assist individuals with significant physical disabilities and chronic medical conditions. Operating at the intersection of specialized medical care and durable medical equipment supply, Numotion maintains an extensive digital infrastructure to coordinate patient care, process complex medical insurance billing, and manage physician prescriptions. Because of the vital nature of its services, the company routinely collects and stores deeply sensitive health records, detailed clinical assessments, and core identifying information for thousands of vulnerable patients nationwide. In 2025, Numotion formally reported a significant cybersecurity incident to the Massachusetts Attorney General, alerting regulators and affected individuals that unauthorized actors may have compromised its network environment. For specialized healthcare and medical equipment providers, incidents of this magnitude typically involve sophisticated cyberattacks, such as ransomware deployment or unauthorized intrusions into database environments where patient management systems and billing platforms reside. These security breakdowns often stem from vulnerabilities in network perimeters, unpatched software, or compromised employee credentials, allowing malicious parties to covertly dwell within corporate systems and extract confidential files before detection. The exposure of data originating from a complex medical equipment provider carries profound implications for victims, extending far beyond standard identity theft. Compromised records in such incidents frequently include full legal names, dates of birth, Social Security numbers, comprehensive medical diagnosis and treatment histories, health insurance identification numbers, and specific prescription details. When combined, this information equips malicious actors to perpetrate targeted medical identity theft—such as fraudulently billing government and private insurers for equipment or services, intercepting legitimate medical care, and opening fraudulent lines of credit using an individual's Social Security number and personal identifiers, exposing victims to years of financial and clinical distress. As a healthcare-related entity and custodian of protected health information, United Seating and Mobility was bound by stringent regulatory frameworks, including the Health Insurance Portability and Accountability Act (HIPAA) Security and Privacy Rules, as well as Massachusetts state data privacy and consumer protection statutes. These laws impose affirmative legal duties to implement robust administrative, physical, and technical safeguards, such as multi-factor authentication, rigorous network monitoring, data encryption, and regular security audits. The occurrence of a data breach of this scale strongly indicates a failure to maintain these required security standards, raising serious questions about whether the company fulfilled its legal obligations to protect sensitive consumer data. Receiving a data breach notification letter from Numotion serves as formal legal recognition that your confidential records were compromised due to corporate security failures. Legally, the receipt of this notice establishes the concrete injury necessary to pursue a class action lawsuit, meaning affected individuals do not need to wait until they experience actual financial fraud or medical identity theft to take legal action. Our law firm is currently investigating potential class action claims against United Seating and Mobility on a contingency fee basis, meaning there are never any out-of-pocket costs or upfront fees for affected consumers, and we only recover compensation if a successful recovery is achieved on your behalf.

See every breach reported in Massachusetts or read what to do after a ransomware attack.