Mid-Florida Pathology

Mid-Florida Pathology, also known as MFP, operates as a pathology provider within the United States healthcare system. The organization delivers diagnostic pathology services that support physicians and other healthcare professionals in identifying disease states through laboratory analysis of tissue, blood, and other specimens. Its core function involves examining patient samples to provide information that guides clinical decision‑making and treatment planning. As indicated by its name and the context of the reported incident, the entity focuses exclusively on pathology rather than broader medical specialties.

Publicly available sources do not specify the organization's size, such as the number of employees, annual revenue, or the geographic extent of its service footprint. Likewise, no explicit figures are given regarding the number of laboratories it operates or the volume of tests it processes each year. Consequently, any description of its scale must be limited to the qualitative observation that it is a regional pathology provider based in the United States, with its headquarters situated somewhere in the country.

Mid-Florida Pathology came to public attention in November 2020 when it was identified as one of several U.S. medical entities compromised by the Pysa threat actor group. The attackers deployed Mespinoza ransomware, which both exfiltrated sensitive data—including Social Security numbers and medical histories—and encrypted the organization's systems. Although the breach was publicly listed on a dark‑web leak site by the attackers, the pathology provider did not issue notifications to regulators or affected patients despite evidence that personal information had been exposed. This incident highlighted the continued targeting of the medical sector by ransomware‑as‑a‑service operations and underscored the variability in breach disclosure practices among healthcare organizations.

Details concerning Mid-Florida Pathology's ownership structure, such as whether it is independently held, part of a larger corporate group, or has any subsidiaries, are not provided in the available sources. Similarly, no information is given about its governance, parent‑company relationships, or any recent mergers or acquisitions. Consequently, the profile can only confirm the organization's role as a pathology service provider and the circumstances of the 2020 ransomware event without speculating on its corporate architecture.