MyCardiologist Data Breach Affects Patient PII and PHI

Published
October 14, 2025
Updated
October 14, 2025
MyCardiologist Data Breach Affects Patient PII and PHI
MyCardiologist
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

MyCardiologist

data breach?

Join the Lawsuit

It's free to join. 

MyCardiologist, a large cardiology practice based in South Florida, experienced a major data breach. One June 12, 2025, the practice became aware of suspicious activity within its internal email systems. An investigation revealed that a threat actor gained access to the MyCardiologist network and acquired sensitive patient information between May 30, 2025 and June 12, 2025.

A review was completed on Sept. 9, 2025 and determined that the cyberattack compromised both personally identifiable information (PII) and protected health information (PHI). Exposed patient information included names, address, Social Security numbers, dates of birth, driver's license numbers, payment card information and medical records including Medicare numbers, provider name and location and diagnosis information.

The total number of affected individuals has not been released, but is believed to include several thousand current and former patients. MyCardiologist began mailing notification letters on Oct. 7, 2025.

MyCardiologist’s response to the incident

Upon learning of the breach, MyCardiologist implemented its incident response plan and engaged third-party cybersecurity experts. In addition to required state and federal disclosures, the practice is offering affected individuals 24 free months of Epiq-Privacy Solutions ID credit monitoring and identity restoration services.

If you receive a notice from MyCardiologist about this breach, you may want to:

  • Sign up for the free credit monitoring and identity theft restoration services, offered by the medical practice.
  • Monitor your credit reports and financial accounts for any unusual activity.
  • Be alert for phishing emails or phone calls that may use your exposed information.
  • Consider placing a fraud alert or credit freeze with major credit bureaus.

The cardiology practice also set up a dedicated assistance line for questions at 855-291-2561 Monday through Friday from 9:00 a.m. to 9:00 p.m., EST.

More information about the medical group can be found on the MyCardiologist website.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
MyCardiologist
Consumers Notification date
Date of Breach
Breach Discovered Date
Total People Affected
Information Types Exposed
  • first and last name
  • mailing address
  • Social Security number
  • date of birth
  • driver’s license number
  • payment card information
  • clinical information
  • medical diagnosis information
  • Medicare number
  • provider location
  • provider
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image