MedPeds Associates of Sarasota 2025 Data Breach (22 Thousand People Affected)

The 2025 MedPeds Associates of Sarasota data breach involved unauthorized access to the practice's computer system on September 2, 2025. MedPeds says a virus was placed on the system to encrypt data and that some patient data was viewed by the unauthorized party.

The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/information-technology incident involving a network server and reported 22,017 affected individuals.

Verified Incident Timeline

MedPeds discovered the event on September 2, 2025. The practice says it restored its systems with a forensic firm, did not engage with the unauthorized party, and determined that the access was limited. The public notice does not identify the person or group responsible.

What Information May Have Been Affected?

According to the sample individual notice, the affected information may have included names, dates of birth, home addresses, telephone numbers, and patient medical records. The practice says in its public notice that it is not aware of misuse of the data.

How the Practice Responded

MedPeds says it secured its systems, contacted the FBI, and implemented additional safeguards for its server infrastructure. It also established a support line to answer questions from notice recipients.

What Should Affected People Do?

Notice recipients should review health-care summaries, insurance explanations, and medical correspondence for an unfamiliar transaction or service. If an unexpected call or message refers to the MedPeds incident, independently verify the contact details before providing additional health or account information.