Medical Associates of Brevard, a medical practice based in Florida, experienced a major data breach due to a ransomware attack that took place. The BianLian ransomware group claimed responsibility for the attack and posted details on the dark web, stating they obtained a wide range of sensitive patient and practice information.
An investigation was launched and around July 7, 2025 it was determined that the cybersecurity incident compromised personal and protected health information, along with financial information. Exposed information included names, dates of birth, Social Security numbers, driver's license and state ID numbers, medical treatment information, health insurance information and financial account information.
Medical Associates of Brevard began notifying affected individuals by mail on Sept. 5, 2025. The total number of affected individuals has not been released, but is believed to include thousands of patients.
The data breach was also disclosed to the Maine Attorney General's office on Sept. 5, 2025. MAB also published a Data Incident Notification with the breach details on its website.
In response to the breach, Medical Associates of Brevard took steps to secure their systems and engaged external cybersecurity experts. In addition to required state and federal disclosures, MAB is offering 12 months of free Experian credit monitoring services to impacted individuals.
If you receive a notice from Medical Associates of Brevard about this data breach, you may want to:
The medical group also established a dedicated call center at 877-250-2766, available Monday through Friday, 9 a.m. to 9 p.m. Eastern Time, to answer questions.
More information about the medical group and its multiple locations is available on the Medical Associates of Brevard website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.