Think Big Health Care Solutions Data Breach Exposes PHI and PII

Think Big Health Care Solutions, a healthcare consulting and practice management company based in Wellington, Florida, disclosed a data breach that may have exposed sensitive personal and medical information.

On June 20, 2025, Think Big discovered suspicious activity involving an employee's email account. Think Big then launched an investigation and engaged third-party cybersecurity specialists to help secure its systems and conduct a forensic investigation into the nature and scope of the event.

The investigation found evidence suggesting that some emails and files may have been accessed by an unauthorized third party. Think Big then began reviewing the affected systems to determine which individuals were impacted and what types of information were at risk.

The range of personally identifiable information (PII) potentially exposed was extensive. It included first name or initial and last name, Social Security number, Tax Identification number, passport number, address, date of birth, telephone and fax numbers, email address, web URL, bank or financial account number, routing number, credit or debit card number, and CVV and expiration date of credit or debit card.

Protected health information (PHI) potentially exposed included admission dates, health insurance policy number, diagnosis or condition, lab results, medications, claims information, medical record number, other medical and health information, CPT codes and referring provider name.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 9, 2026. The company also posted a notice of the cybersecurity event on its website.

Because the company provides services such as patient billing, contracting and credentialing to medical practices, it may hold information belonging to physicians, providers and patients of its clients.

Think Big Health Care Solutions began notifying consumers by mail on Oct. 9, 2026. So far, 87 Massachusetts residents were identified as affected.

Think Big Health Care Solutions' response to the breach

Think Big Health Care Solutions is offering affected individuals 24 months of free Single Bureau Credit Monitoring, Single Bureau Credit Report and Single Bureau Credit Score services through Cyberscout, a TransUnion company.

Affected individuals can enroll by visiting the Cyberscout activation page and entering the unique code included in their notification letter. Enrollment must be completed within 90 days of the date of the letter.

Individuals with questions can call a dedicated assistance line at 1-877-429-7987, available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern time, excluding holidays.