Suntree Internal Medicine Data Breach Impacts 9.8k Patients: PHI Exposed

Suntree Internal Medicine, a private internal medicine practice based in Melbourne, Florida, disclosed a data breach in 2025 that affected approximately 9,810 individuals in the United States.

The breach was reported to the U.S. Department of Health and Human Services on June 18, 2026. The practice also posted a notice of the incident on its website.

On Sept. 28, 2025, Suntree Internal Medicine identified unusual activity within a portion of its digital environment. The practice took steps to secure its network right away and engaged cybersecurity experts to investigate the nature and scope of the incident.

On Oct. 1, 2025, a ransomware group known as INC Ransom publicly claimed responsibility for the attack. The group posted on the Tor network, stating that it had obtained data from the organization.

The investigation determined that certain files within the practice's systems may have been accessed or taken without authorization. The practice then conducted a thorough review of the affected files to identify what information was contained in them and to determine which individuals may have been affected.

The types of information exposed in the breach included names, addresses, medical treatment information and health insurance information.

According to the company's notification, Social Security numbers, credit card information and bank account information were not involved in this incident.

Suntree Internal Medicine's response to the breach

The practice provided guidance in its notification on steps impacted patients can take to protect themselves from medical identity theft.

Suntree Internal Medicine also set up a dedicated call center for individuals who have questions about the incident or who would like more information about how to protect themselves. Individuals seeking assistance can reach the call center at 833-851-4841. The call center is available from 8:00 a.m. to 8:00 p.m. ET, Monday through Friday, excluding holidays.