MyCardiologist, a large cardiology practice based in South Florida, experienced a major data breach. One June 12, 2025, the practice became aware of suspicious activity within its internal email systems. An investigation revealed that a threat actor gained access to the MyCardiologist network and acquired sensitive patient information between May 30, 2025 and June 12, 2025.
A review was completed on Sept. 9, 2025 and determined that the cyberattack compromised both personally identifiable information (PII) and protected health information (PHI). Exposed patient information included names, address, Social Security numbers, dates of birth, driver's license numbers, payment card information and medical records including Medicare numbers, provider name and location and diagnosis information.
The total number of affected individuals has not been released, but is believed to include several thousand current and former patients. MyCardiologist began mailing notification letters on Oct. 7, 2025.
Upon learning of the breach, MyCardiologist implemented its incident response plan and engaged third-party cybersecurity experts. In addition to required state and federal disclosures, the practice is offering affected individuals 24 free months of Epiq-Privacy Solutions ID credit monitoring and identity restoration services.
If you receive a notice from MyCardiologist about this breach, you may want to:
The cardiology practice also set up a dedicated assistance line for questions at 855-291-2561 Monday through Friday from 9:00 a.m. to 9:00 p.m., EST.
More information about the medical group can be found on the MyCardiologist website.