MedPeds Associates of Sarasota, a healthcare provider, reported a data breach impacting 21,430 individuals. The breach occurred on September 2, 2025, when a virus was deployed by an unidentified party, leading to unauthorized access and data encryption. The company restored systems with the help of a forensic firm and reported the incident to the FBI.
The confirmed data types exposed include names, dates of birth, addresses, phone numbers, and patient medical records (PHI). While a ransomware group claimed theft of Social Security numbers, government IDs, and financial information, this has not been officially confirmed by MedPeds. The breach affected individuals nationwide, with specific notification to 15 Maine residents. The full extent of data types compromised beyond those officially confirmed remains unclear.
Data breach details can emerge over time, and notification processes may be delayed.