Florida Physician Specialists

Summary

Florida Physician Specialists discovered that its network had been accessed by an unauthorized third party, leading to a review of the compromised data. The exposed information included names, Social Security numbers, driver’s license numbers, financial account details, medical records and health insurance information, affecting approximately 276,000 individuals. The investigation confirmed the breach and the review of the data was completed after several months of analysis.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Florida Physician Specialists learned of a cybersecurity incident between November 27 and 29, 2025, when it detected unauthorized access to its network. An investigation launched in late November 2025 confirmed that an unauthorized third party had gained entry and remained active for approximately two days during that period. The organization’s internal review determined that the intrusion occurred within a narrow window in November 2025. The review of the exposed data was finalized on April 6, 2026.

The breach exposed personal information including full names, Social Security numbers, driver’s license numbers or state identification numbers, other government identification numbers, financial account information, credit or debit card numbers, medical information, and health insurance policy details. According to the HHS breach tracker, the incident affected approximately 276,000 individuals. The exposed data elements align with the types of information typically held by a multi‑specialty private physician practice. Florida Physician Specialists, based in Jacksonville, Florida, serves patients across Northeast Florida.

Following the completion of the data review, Florida Physician Specialists issued breach notifications to those whose information was compromised. Edelson Lechtzin LLP launched an investigation into the exposure of personal information and is evaluating potential class action claims on behalf of affected individuals. The press release dated May 3, 2026, announced the law firm’s involvement and provided contact information for individuals seeking a free case evaluation. No known cybercrime group has claimed responsibility for the intrusion.

Sources

Sources available to members: 3 sources.