Space Coast Vascular, a medical group based in Florida, experienced a cyberattack. On Aug. 7, 2025, an investigation determined that both personally identifiable information (PII) and protected health information (PHI) belonging to patients was compromised in the data breach.
Exposed information includes names, dates of birth, Social Security numbers, driver's license and state ID numbers, medical treatment information, health insurance information and financial account information. The total number of impacted individuals has not been released, but is believed to include several thousand current and former patients.
Space Coast Vascular began notifying affected individuals by mail on Oct. 3, 2025. The practice also published a Notice of Data Incident on its website.
The combination of personal, protected health and financial data compromised in attack puts patients at risk for identity theft and multiple types of fraud. The cybersecurity incident was also disclosed to the Maine Attorney General's office on Oct. 6, 2025.
After discovering the cyberattack, Space Coast Vascular took action to secure their systems and engaged third-party cybersecurity experts to conduct an investigation. In addition to required state disclosures, the medical practice is offering affected individuals 12 free months of Experian credit monitoring services.
To support those impacted, Space Coast Vascular is offering at least 12 months of free credit monitoring and identity protection services through Experian. Affected individuals are encouraged to enroll in these services by Dec. 31, 2025. The company has established a dedicated call center at 866-497-0453, available Monday through Friday, 9 a.m. to 7 p.m. Eastern time, to answer questions and assist with enrollment.
If you receive a data breach notice from Space Coast Vascular, you may want to:
For more information about the medical practice, visit the Space Coast Vascular website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.