In January 2025, Medical Associates of Brevard suffered a targeted cyberattack that exposed sensitive patient data, including names, Social Security numbers, and health records. The breach led to a class action lawsuit, alleging the company failed to implement adequate security measures to protect personal information. As part of the settlement, the company agreed to pay $300,000, offering affected individuals up to $1,500 in reimbursement for documented losses (e.g., identity theft, credit monitoring, ID replacement) and one year of medical data monitoring (including $1M in identity theft insurance). The breach impacted patients whose data was stored during the incident, with potential risks of fraud, medical identity theft, and unauthorized financial activity. The settlement acknowledges the exposure of highly sensitive health and financial information, posing long-term risks to victims.
Source: https://www.claimdepot.com/settlements/med-associates-brevard-data-breach
TPRM report: https://www.rankiteo.com/company/medical-associates-of-brevard
"id": "med5402954102525",
"linkid": "medical-associates-of-brevard",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'All living individuals in the '
'U.S. whose private information '
'may have been impacted (exact '
'number unspecified)',
'industry': 'Healthcare',
'location': 'Brevard, Florida, USA',
'name': 'Medical Associates of Brevard',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Eligible individuals can claim up to $1,500 for '
'documented losses or one year of CyEx Medical Shield '
'Pro monitoring. Claims must be filed by Dec. 1, 2025.',
'data_breach': {'data_exfiltration': 'Yes (files containing sensitive '
'information were exposed)',
'personally_identifiable_information': ['Names',
'Social Security '
'numbers',
'Health data (e.g., '
'medical records, '
'insurance IDs, HSA '
'information)'],
'sensitivity_of_data': 'High (includes SSNs and health data)',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2025-01',
'description': 'A targeted cyberattack on Medical Associates of Brevard’s '
'computer systems in January 2025 exposed files containing '
'sensitive information, including names, Social Security '
'numbers, and health data. The company agreed to a $300,000 '
'settlement for failing to adequately protect this '
'information, offering affected individuals up to $1,500 for '
'documented losses and one year of medical data monitoring.',
'impact': {'brand_reputation_impact': 'Class action lawsuit and settlement '
'indicate reputational damage',
'data_compromised': ['Names',
'Social Security numbers',
'Health data'],
'financial_loss': {'attorneys_fees': 'Up to $300,000',
'class_representative_award': 'Up to $3,000',
'individual_compensation': 'Up to $1,500 per '
'claimant for '
'documented losses',
'settlement_amount': '$300,000',
'total_potential_payout': None},
'identity_theft_risk': 'High (names, SSNs, and health data '
'exposed)',
'legal_liabilities': '$300,000 settlement',
'systems_affected': ['Computer systems']},
'investigation_status': 'Settled (class action lawsuit resolved with '
'compensation and monitoring services)',
'post_incident_analysis': {'corrective_actions': 'Settlement agreement (no '
'technical remediation '
'details provided)',
'root_causes': 'Alleged failure to adequately '
'protect sensitive information '
'(specific technical root causes '
'unspecified)'},
'references': [{'source': 'Class Action Settlement Notice'},
{'source': 'Settlement Administrator Contact',
'url': 'info@MedAssociatesBrevardDataBreach.com'},
{'source': 'Settlement Website (hypothetical)'}],
'regulatory_compliance': {'fines_imposed': '$300,000 settlement (not a fine, '
'but financial penalty)',
'legal_actions': 'Class action lawsuit settled out '
'of court'},
'response': {'communication_strategy': 'Direct notices to affected '
'individuals, public settlement '
'announcement, and claim submission '
'process (online/mail/email)',
'recovery_measures': 'Settlement agreement including '
'compensation and monitoring services'},
'stakeholder_advisories': 'Notices sent to affected individuals with claim '
'instructions (ID/PIN provided for online claims)',
'title': 'Medical Associates of Brevard Data Breach',
'type': 'Data Breach'}