Mid Florida Primary Care Data Breach Affects 16,435 People

Mid Florida Primary Care, based in Leesburg and Summerfield, Florida, had a data breach that affected 16,435 people. On Jan. 23, 2025, the practice noticed suspicious activity in its network. An investigation found that someone accessed and copied information without permission between Nov. 29, 2024, and Dec. 11, 2024.

The practice finished reviewing the affected information on June 19, 2025. It mailed letters to affected people on July 29, 2025.

The information involved may include names, addresses, dates of birth, email addresses, Social Security numbers, driver's license numbers and health insurance information. It may also include Medicare and Medicaid numbers, health plan or policy numbers, medical information, medical history, diagnosis and treatment information, allergies, prescription information, test results and treatment location.

The breach was reported to the U.S. Department of Health and Human Services (HHS) on March 21, 2025, with 16,435 people affected. It was also disclosed to the Massachusetts, Vermont and New Hampshire attorneys general offices beginning on July 29, 2025. The practice also published a Notice of Data Event on its website on July 29, 2025.

On Dec. 14, 2024, a hacker group called BianLian claimed on the dark web that it had attacked the practice. The group claimed it took financial records, HR data, emails and patient health records. These claims have not been confirmed, and the practice's notices do not name the group.

Mid Florida Primary Care's response

Mid Florida Primary Care is offering free identity monitoring through Privacy Solutions for 12 or 24 months, depending on the person's risk profile. The services include credit monitoring through Equifax, credit reports and scores, identity theft insurance, ID restoration and dark web monitoring. The letters sent to affected people include activation codes and steps to sign up.

Because both personal and health information may have been exposed, people should watch for signs of identity theft or fraud. This includes checking account statements and credit reports, placing fraud alerts or credit freezes with the major credit bureaus and reporting anything suspicious to banks or law enforcement. More tips are in the official consumer notice, which is available as a PDF at the end of this page.

People with questions can call the help line at 877-580-5596, Monday through Friday from 9 a.m. to 6 p.m. Eastern Time, except major holidays.

More information about the practice can be found on the Mid Florida Primary Care official website.