.png)
Modernizing Medicine (ModMed) Data Breach Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Modernizing Medicine, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Modernizing Medicine
Modernizing Medicine Inc. is a healthcare technology company based in Boca Raton, Florida. Founded in 2010, the company has over 1,400 employees and serves medical practices across the United States. It's platforms integrate practice management, revenue cycle management, analytics, patient engagement and telemedicine into a single system. Physicians are actively involved in developing these solutions to ensure they meet the needs of specialty practices.
Modernizing Medicine, also known as ModMed specializes in cloud-based software solutions for specialty medical practices, including dermatology, gastroenterology, ophthalmology, orthopedics, and more. The company's electronic health record (EHR) system, EMA, is designed to streamline clinical, financial and operational workflows for healthcare providers.
What happened?
In July 2025, Modernizing Medicine discovered unauthorized activity in certain computer servers used by its podiatry practice clients. The company determined that between July 9 and July 10, 2025, a cybercriminal accessed and copied sensitive information stored on these internal servers.
ModMed began notifying impacted practices on Sept. 19, 2025. The data breach compromised both personal and protected health information belonging to patients. Data breach notices were mailed to affected individuals on Oct. 17, 2025.
Information exposed
- Full name
- Address
- Date of birth
- Phone number
- Email address
- Social Security number
- Health insurance information
- Medical record number
- Patient account number
- Date(s) of service
- Provider and practice name
- Billing and diagnostic codes
- Prescription and medication information
- Diagnosis and treatment information
Disclosures were filed with the Massachusetts Attorney General on Oct. 17, 2025, and with the Vermont Attorney General on Oct. 20, 2025. The total number of affected practices and patients has not been publicly released, but includes at least 737 Massachusetts residents.
Your Rights and Next Steps
If you received a notice about this breach, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
These are steps you can take to protected yourself:
- Credit monitoring and identity theft protection services: Enroll in the free IDX credit monitoring and identity theft protection services, if offered.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
Lawyers are ready to help individuals affected by the Modernizing Medicine data breach. If your information was exposed, you may be eligible to join a lawsuit and seek compensation, which could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
To find out if you qualify to purse a claim for damages, complete the form below.
.svg)