Suntree Internal Medicine, a private internal medicine practice in Melbourne, Florida, identified unusual activity in part of its digital environment on September 28, 2025. The practice secured its network, hired cybersecurity specialists, and investigated the incident. INC Ransom publicly claimed responsibility on October 1, 2025. Suntree reported the breach to the U.S. Department of Health and Human Services on June 18, 2026 and posted an incident notice on its website.
The investigation found that certain files may have been accessed or taken without authorization. The affected information included names, addresses, medical treatment information, and health insurance information. The breach affected approximately 9,810 people in the United States. Suntree said Social Security numbers, credit card information, and bank account information were not involved.
The available information does not state when individual consumers were notified. Details about the affected files and the scope of the incident may be refined as the investigation and notification process continues.