Mid Florida Dermatology & Plastic Surgery Data Breach Investigation
Strauss Borrelli PLLC is investigating the reported Mid Florida Dermatology & Plastic Surgery data incident and whether affected individuals may have legal options. The provider’s notice says information may have been copied without authorization, potentially involving identity, financial, insurance, and medical data. If you received a notice or believe your information may be involved, review the protective steps below and fill out the secure contact form on this page to help determine whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Mid Florida Dermatology & Plastic Surgery (Healthcare)
- Incident Type: Reported cyber incident involving possible unauthorized copying of information
- Date of Incident: March 26, 2026 to March 30, 2026
- Discovery Date: March 30, 2026
- Official Notice Date: September 10, 2026
- Exposed Information: Names, addresses, dates of birth, passport numbers, driver’s license numbers, Medicare numbers, Social Security numbers, other government identification numbers, financial account information, health insurance information, and medical information
- Affected Population: Not stated in the provider’s consumer notice; under investigation
What Happened?
According to Mid Florida Dermatology & Plastic Surgery’s consumer notice, the healthcare provider became aware of unusual activity in its digital environment on March 30, 2026. It then retained specialists to investigate the nature and scope of the activity. The investigation reportedly found that certain information may have been copied without authorization during an event lasting from March 26 through March 30, 2026.
The provider said it subsequently conducted a comprehensive review to identify the sensitive or personal information potentially involved and determine the individuals to whom that information related. That review was reportedly completed on August 31. The official notice was issued on September 10, 2026, and states that letters are being sent to individuals whose information was identified in the affected files when a valid mailing or email address is available. The notice does not identify a ransomware group, describe the technical method used, or confirm that every listed data category was involved for every person.
What Information Was Exposed?
The information potentially involved varied by individual. According to the provider’s notice, affected files may have contained names, addresses, dates of birth, passport numbers, Social Security numbers, driver’s license or state identification numbers, Medicare numbers, other government identification numbers, financial account numbers, financial account access information, health insurance information, and medical information.
The combination of identity and healthcare data may create risks beyond ordinary financial fraud. Criminals could potentially use this information for medical identity theft, fraudulent patient billing, false insurance claims, prescription-related inquiries, or convincing insurance verification scams. A notice recipient should therefore monitor credit files, financial accounts, health plan statements, and explanations of benefits for activity that the person does not recognize.
What Should You Do Next?
- Confirm whether you were affected: Review any letter or email you received from the provider. Individuals who did not receive a notice but have questions may contact the dedicated assistance line at 1-877-344-1677 during the hours listed in the official notice.
- Review credit and financial accounts: Check your credit reports, bank statements, and payment accounts for unfamiliar inquiries, new accounts, withdrawals, or changes to contact information. Report suspicious activity promptly to the relevant institution.
- Monitor healthcare records: Examine health insurance statements, explanations of benefits, patient portal entries, bills, and prescription records. Contact your medical provider or insurer if you see treatment, claims, prescriptions, or patient balances that are not yours.
- Consider a fraud alert or credit freeze: A fraud alert asks lenders to take additional identity-verification steps. A credit freeze generally restricts access to your credit file and can help prevent unauthorized accounts from being opened in your name.
- Watch for targeted scams: Be cautious with calls, emails, or texts requesting insurance numbers, portal credentials, payments, or identity verification. Use a known phone number or website to contact the provider or insurer rather than responding through an unexpected message.
Your Legal Rights
People whose information was involved in a reported healthcare data incident may have rights under federal or state privacy, consumer-protection, and data security laws. Depending on the facts and applicable law, potentially affected individuals may be able to seek compensation for documented losses, time spent addressing identity theft, loss of privacy, or other legally recognized harm. Available rights and deadlines can vary by location and circumstance, and receiving a notice does not automatically establish a valid claim.
Preserve the notice letter, envelopes, relevant emails, suspicious bills, credit reports, explanations of benefits, and records of time or expenses connected to the incident. These materials may help an attorney evaluate whether a claim is available. General information about this event is not a substitute for individualized legal advice.
Why Hire Strauss Borrelli PLLC?
The firm represents consumers in privacy and data security matters and can investigate whether reasonable safeguards and notification procedures were followed. Attorneys can review the available facts, explain potential options, and assess whether an affected person may qualify to pursue a claim. Completing the secure contact form allows the legal team to evaluate the circumstances confidentially and provide information about possible next steps.
If you received a breach notification letter from Mid Florida Dermatology & Plastic Surgery:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
