







Retina Group of Florida, an eye care medical group with 22 locations, experienced a major data breach. The cybersecurity incident sensitive information belonging to at least 153,429 patients of the specialized ophthalmology practice.
The eyecare group discovered suspicious activity within its network on Nov. 9, 2024. An investigation revealed that a cybercriminal gained access to the network between Nov. 6 and Nov. 9, 2024, and that sensitive information may have been obtained.
The breach was disclosed to the U.S. Department of Health and Human Services on Sept. 3, 2025, reported as a hacking incident. The data breach compromised both personally identifiable information (PII) and protected health information (PHI).
Exposed information could include names, addresses and other contact information, dates of birth, Social Security numbers, driver's license copies, health insurance information, medical records and payment information. The combination of exposed information increases the risk of identity theft, financial fraud and potential misuse of sensitive health data.
The medical group began notifying impacted individuals by mail on Sept. 16, 2025. The data breach was also disclosed to the Maine Attorney General's office on Sept. 16, 2025 and the Massachusetts Attorney General on Sept. 17, 2025.
In addition to required state and federal disclosures, the eyecare group is offering impacted patients 12 free months of TransUnion Cyberscout credit monitoring and identity protection services.
If you received a notice or believe your personal information may have been compromised in this breach:
Retina Group of Florida also established a dedicated assistance line for impacted individuals at 833-799-4243, Monday through Friday from 8:00am - 8:00pm ET.
For additional details about the ophthalmology practice, visit the Retina Group of Florida website.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)