Pediatric Otolaryngology Head & Neck Surgery Associates, P.A., with multiple Florida locations, experienced a data breach impacting at least 43,446 current and former patients. The breach was disclosed to the U.S. Department of Health and Human Services on Aug. 18, 2025, reported has a hacking incident.
The cybersecurity incident compromised both personally identifiable information (PII) and protected health information (PHI). Exposed patient information may include names, contact information, dates of birth, Social Security numbers, driver's license copies, health insurance details, medical records and payment card information.
The scale of the breach, including the large amount of data affected, puts tens of thousands of patients and their families at risk for identity theft and financial fraud.
In addition to required state and federal disclosures, the medical group will notify affected individuals by mail.
If you believe your personal information may have been compromised in this breach:
More information about the practice and locations can be found on the Pediatric Otolaryngology Head & Neck Surgery Associates, P.A. website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.