South Florida Injury Centers Data Breach Affects 1,525: PHI and PII Exposed

South Florida Injury Centers Inc., a chiropractic and injury-care practice in South Florida, disclosed a data breach that affected approximately 1,525 individuals in the United States.

The breach was disclosed to the U.S. Department of Health and Human Services on May 22, 2026. It was also reported to the Indiana and Massachusetts attorneys general offices.

South Florida Injury Centers identified suspicious activity on certain servers within its network on March 23, 2026. An investigation into the incident determined that an unauthorized third party had accessed the company's network over a period of approximately three weeks, between Feb. 21, 2026, and March 15, 2026.

During that time, the intruder had access to systems containing sensitive patient information. The breach involved both personally identifiable information (PII) and protected health information (PHI).

The PII exposed included names and Social Security numbers. The PHI exposed included medical records, diagnosis and treatment information, diagnostic testing results (such as MRI or X-ray reports), hospital records and intake forms containing medical history.

South Florida Injury Centers' response to the breach

South Florida Injury Centers is offering complimentary identity monitoring services to affected individuals and encouraged them to enroll in the program. The company also encouraged those who were affected to remain vigilant against incidents of identity theft and fraud.

The notification letter sent to affected individuals included an enclosed document with additional steps individuals can take to help protect their personal information against potential misuse.

For those with questions about the incident, the company has set up a dedicated assistance line available Monday through Friday from 8:00 a.m. to 8:00 p.m. EST. The toll-free phone number can be found in the notification letter sent to affected individuals.