Skip to content
cisonews.net

Incident · State breach notice (Massachusetts)

Florida Physician Specialists data breach: network access in November 2025, and what was taken

Compiled from public records. Updated 2026-11-13. By the cisonews.net Desk.

The Florida Physician Specialists data breach affected 276,498 people, according to the federal health breach portal, where Florida Physician Specialists reported a hacking or IT incident as a health care provider on April 24, 2026. Florida Physician Specialists says someone had unauthorized access to its network from about November 27 to November 29, 2025. A review that ended on April 6, 2026 found that patients' names, along with Social Security numbers, card details or medical information, may have been removed. The federal health breach list counts 276,498 people, 26th largest of the reports filed with HHS in 2026. Letters offer an Equifax Credit Watch Gold membership.

Entries like this one, in Wednesday’s docket

Wednesdays

Unsubscribe any time.

What happened at Florida Physician Specialists?

The practice says it began an investigation straight away with outside cybersecurity professionals, to work out how much of the information on its network was compromised. The letter does not say how the intruder got in or whether a ransom was demanded.

DateWhat the letter and the regulators' records say
About November 27 to 29, 2025Unauthorized access to the network
April 6, 2026Investigation and document review end
April 24, 2026Report to HHS (276,498)
April 25, 2026Logged in Massachusetts (98 residents)

The report to HHS came about five months after the access, and 18 days after the review ended.

What information was involved?

The letter lists the reader's full name with one or more of: Social Security numbers, driver's license or state ID numbers, other government ID numbers, financial account information, credit or debit card information, medical information and health insurance policy information. For the 98 Massachusetts residents in Florida Physician Specialists' notice, the state's record marks all five of its categories as breached: Social Security numbers, medical records, financial accounts, driver's licenses and card numbers. Only 62 of the 1,949 records on the state's 2026 report, as fetched on November 7, mark all five.

The practice says it knows of no identity fraud or misuse resulting directly from the incident.

What is Florida Physician Specialists offering?

ItemDetail from the letter
ServiceEquifax Credit Watch Gold, free, for the number of months printed on each letter
Questions844.558.4678, Monday to Friday, 9:00 a.m. to 9:00 p.m. Eastern Time

The letter also suggests a fraud alert or security freeze and a free credit report. The guide to credit monitoring offers explains what each kind of service covers.

What Texas's attorney general recorded

Texas's attorney general lists a report from Florida Physician Specialists, posted on April 27, 2026, with 319 Texans affected, a count of Texas residents only. The record lists names, Social Security numbers, driver's license numbers, government ID numbers, financial account or card information, medical information and health insurance information as involved.

What the documents leave open

  • How the intruder got into the network.
  • How long the membership lasts; the sample leaves the number of months blank.

With 276,498 people, Florida Physician Specialists' report is the 26th largest of the 415 open 2026 reports in the ranking of 2026 healthcare breaches reported to HHS.

How this disclosure's timing compares

Florida Physician Specialists disclosed 147 days after the discovery date its notice gives. Across the 206 other state breach notices on cisonews.net that date discovery to the day, the median gap is 100 days.

Other health care incidents on cisonews.net

All health care incidents

Sources

  1. 2026-04-25 · AFlorida Physician Specialists, notice of data breach filed with the Massachusetts Office of Consumer Affairs and Business Regulation, published April 25, 2026
  2. 2026-11-07 · AU.S. Department of Health and Human Services, Office for Civil Rights, breach portal (breaches affecting 500 or more individuals), published November 7, 2026
  3. 2026-11-07 · AMassachusetts Office of Consumer Affairs and Business Regulation, 2026 Data Breach Notification Report, published November 7, 2026
  4. 2026-11-09 · ATexas Attorney General, data security breach reports, published November 9, 2026

Tier A: the organization itself (including notices it filed with a state attorney general), a regulator or SEC EDGAR. Tier B: established press. Each fact on this page carries its supporting passage in the page source.

Entries like this one, in Wednesday’s docket

Wednesdays

Unsubscribe any time.