Mid Florida Primary Care Data Breach
The 2024 Mid Florida Primary Care data breach involved unauthorized access to and copying of files in the healthcare provider's network. According to the organization's official notice, the access lasted from November 29 through December 11, 2024.
Exposed Data Types
8 sensitive16- Health insurance information
- Medicare numbers
- Medicaid numbers
- Diagnoses
- Treatment information
- Medical histories
- Prescription information
- Treatment locations
- Names
- Physical addresses
- Dates of birth
- Email addresses
- Social security numbers
- Driver's licenses
- Allergies
- Test results
About This Breach
Mid Florida Primary Care is an internal-medicine practice serving the Leesburg and Summerfield areas of Florida.
When did the breach occur?
The unauthorized access began on November 29, 2024 and continued through December 11, 2024. The organization detected suspicious network activity around January 23, 2025, completed its review of the potentially affected data on June 19, 2025, and published its public notice on July 29, 2025.
What information may have been affected?
Depending on the person, the affected information could include names, addresses, dates of birth, email addresses, Social Security numbers, driver's-license numbers, health-insurance information, Medicare or Medicaid numbers, health-plan or policy numbers, diagnosis and treatment information, medical histories, allergies, prescription information, test results and treatment locations.
The public notice states that not every data type was involved for every person.
How many people were affected?
The U.S. Department of Health and Human Services breach portal reports that the incident affected 16,435 people.
What should affected people do?
Notice recipients should review credit reports, health-insurance explanations of benefits and patient accounts for unfamiliar transactions or services. People whose Social Security or driver's-license numbers were involved may wish to consider a credit freeze or fraud alert.
Be cautious with unexpected calls, emails or messages that refer to this incident and request personal or health information. Independently verify requests through contact channels on the organization's official website.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
