ModMed Data Breach Affects PII & PHI

Modernizing Medicine, a company that provides electronic health records and other services to podiatry practices, experienced a data breach. On July 21, 2025, the organization detected suspicious activity within its computer servers.

On July 29, 2025, an investigation revealed that an unauthorized actor accessed and copied files containing sensitive information between July 9, 2025 and July 10, 2025. The cyber security incident compromised both personally identifiable information (PII) and protected health information (PHI). ModMed began notifying its impacted healthcare providers on Sept. 19, 2025.

According to notices mailed to affected individuals on Oct. 17, 2025, exposed information may have included full names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses, health insurance information, medical record numbers, patient account numbers, dates of service, providers, practice names, billing and diagnostic codes, prescription and medication information and diagnosis and treatment information.

Modernizing Medicine also disclosed to the Massachusetts Attorney General on Oct. 17, 2025. Impacted patients includes at least 737 Massachusetts residents.

The cyberattack was also reported to the Vermont Attorney General's office on Oct. 20, 2025. The total number of affected individuals has not been released, but includes multiple practices and patients.

Modernizing Medicine's response

ModMed responded to the breach by blocking further unauthorized access, engaging cybersecurity experts and notifying law enforcement. In addition to required state and federal disclosures, the organization is offering individuals with compromised Social Security numbers free IDX credit monitoring and identity theft protection services.

If you receive notification from Modernizing Medicine or your provider about this breach, you may want to:

• Sign up for the free credit monitoring and identity theft protection services, offered by ModMed.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

More information about the healthcare services company can be found on the Modernizing Medicine website.