Mid Florida Dermatology & Plastic Surgery has reported a cyberattack that may have exposed the personal, financial, and medical records of 85,585 patients. The Orlando-based practice, which operates 33 offices throughout central Florida, determined that an unauthorized party may have copied information from its systems between March 26 and March 30.
The practice initially identified unusual activity on its network on March 30 and concluded a review of the affected files on August 31. The incident was formally reported to the US Department of Health and Human Services on May 1. Additionally, the ransomware group Qilin claimed responsibility for the breach through a dark web post published on April 25.
According to the practice, the data involved varies by individual and may include:
- Names, addresses, and dates of birth
- Social Security numbers, driver's license numbers, passport numbers, and Medicare numbers
- Financial account numbers and account access information
- Health insurance details and medical information
Mid Florida Dermatology is currently mailing notification letters to affected patients. Individuals who do not receive a letter but wish to verify if their information was impacted can contact the practice's assistance line at 1-877-344-1677.
In response to the incident, the practice is advising patients to closely monitor their account statements, explanation of benefits forms, and credit reports for any signs of suspicious activity.
