Data Breach & Privacy
Blog > Data Breach & Privacy
Mid Florida Dermatology Data Breach: Files Copied Over Five Days in March
Mid Florida Dermatology & Plastic Surgery says information may have been copied from its systems between March 26 and March 30, 2026. The federal breach list counts 85,585 people, and the exposed data can include Social Security, passport, Medicare and financial account numbers.
What Happened at Mid Florida Dermatology
Unusual activity spotted on March 30, 2026
In a notice dated September 10, 2026, Mid Florida Dermatology & Plastic Surgery says it became aware of unusual activity in its digital environment on March 30, 2026. The practice says it began investigating and brought in outside investigators to look into the suspicious activity.
The investigation found that certain information may have been copied without authorization between March 26 and March 30. Mid Florida Dermatology then reviewed the data set to see what was involved and whom it related to, finishing that review on August 31, 2026. It had already reported the breach to federal regulators on May 1, 2026.
Data Involved in the Mid Florida Dermatology Breach
ID numbers, account access details and medical data
The practice says the information varied by person but may include names, addresses, dates of birth, passport numbers, Social Security numbers, driver’s license numbers, Medicare numbers, other government ID numbers, financial account numbers, financial account access information, health insurance information and medical information.
Financial account access information is the most pressing item on that list, since it can mean details that let someone get into an account rather than just identify it. Your letter will show which of these items applied to you.
Who May Be Affected by the Mid Florida Dermatology Breach
Patients of a 33-office Central Florida practice
The U.S. Department of Health and Human Services lists the breach as a hacking incident involving a network server, with 85,585 people affected. Mid Florida Dermatology & Plastic Surgery says it has 33 offices in Central Florida, including in Orlando, Altamonte Springs and Daytona Beach, offering dermatology and plastic surgery.
We didn’t find a filing for this incident with the attorneys general in California, Massachusetts, Texas or Vermont, and the practice hasn’t published a breakdown of where the people notified live.
How Mid Florida Dermatology Responded
A September 10 notice and mailed letters
The practice says it is mailing letters to people whose information was in the affected files and for whom it has a valid mailing or email address. Its public notice came more than five months after it first noticed the unusual activity.
Mid Florida Dermatology says it is reviewing and enhancing its data privacy policies and procedures to reduce the chance of a similar incident. The notice doesn’t mention credit monitoring, so look for any offer in your letter.
Steps for Mid Florida Dermatology Patients
Protecting bank logins, ID numbers and Medicare benefits
Given how many kinds of identifiers are on the list, these steps focus on the accounts most at risk:
- Update online banking credentials. Change passwords and security answers for any account whose access details you may have shared with the practice.
- Read Medicare Summary Notices and insurance statements. Look for dermatology or cosmetic services you never had.
- Freeze your credit. A free freeze at all three bureaus blocks new accounts opened with your Social Security number.
- Add a fraud alert if you want an extra layer. An initial alert is free, lasts a year and requires lenders to take steps to verify your identity.
- Be wary of anyone citing the breach. Scammers often call or email posing as a medical office or bank, so confirm requests through contact details you already have.
This is general information rather than legal advice; a legal professional can help you decide which steps fit your situation.
Talk to Wilshire Law Firm
Did you get a Mid Florida Dermatology breach letter?
Did a letter from Mid Florida Dermatology & Plastic Surgery say your Social Security number, Medicare number or financial account details may have been copied? Wilshire Law Firm is a nationally recognized, award-winning firm that handles data privacy and medical data breach claims, and breaches of this size are sometimes pursued as class actions. Talk with a legal professional in a free consultation or free case review, available 24/7; there are no fees unless you get paid.
Contact Wilshire Law Firm to review your options.
FAQs
The practice says information may have been copied between March 26 and March 30, 2026. It noticed the activity on March 30, reported to HHS on May 1, finished its data review on August 31 and posted its notice on September 10, 2026.
It varies by person but may include names, addresses, dates of birth, passport, Social Security, driver’s license and Medicare numbers, other government ID numbers, financial account numbers and access information, and health insurance and medical information.
85,585, according to the federal HHS breach listing.
By mail or email to people whose information was in the affected files and for whom it has a valid address, plus a notice on its website.
Its public notice doesn’t mention any, so read your letter closely for monitoring or other services.
Medicare numbers are on the list of possible data types, but not every item applies to every person. Your letter should say which ones applied to you.
You may have options. The practice says information including Social Security numbers and financial account details may have been copied, and breaches like this are often reviewed as possible class action claims. Talking it through in a free case review costs nothing.
Send it to someone who could use it, or copy it into ChatGPT, Gemini or your notes.
Start Your Free Case Review
- Available 24/7
- Hablamos Español
- Nationally-Recognized Powerhouse Team
As seen in:
We'll contact you within minutes
No fees unless you get paid.