Mid Florida Primary Care Data Breach Investigation

On July 29, 2025, Mid Florida Primary Care reported to the Attorney General of Vermont that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been compromised. According to the breach notice, on or about January 23, 2025, Mid Florida Primary Care became aware of suspicious activity in its network environment. ¹ As a result, Mid Florida Primary Care launched an investigation to determine the nature of the incident.

Through its investigation, Mid Florida Primary Care revealed that certain information was accessed and copied without authorization between November 29 and December 11, 2024.¹ As a result, Mid Florida Primary Care began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On June 19, 2025, Mid Florida Primary Care finished its review. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name

• Social Security number
• Date of birth
• Address
• Driver’s license or state identification number
• Medical information (e.g., diagnosis and/or treatment information; medical history; allergies; prescription information; test results; and treatment location)
• Health insurance information (e.g., Medicare number; Medicaid number; health insurance plan/policy number)

Recently, Mid Florida Primary Care began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Vermont residents, Mid Florida Primary Care is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that Mid Florida Primary Care filed with the Attorney General of Vermont is below.