HealthConsent
Active breach tracker Sarasota, FL Disclosed March 16, 2026

MedPeds Associates of Sarasota Data Breach 2026 (Beast Ransomware): 22,017 Florida Patients Exposed. 400 GB Claimed Exfiltrated. What To Do

MedPeds Associates of Sarasota, a Florida internal medicine and pediatrics group, disclosed in March 2026 a September 2025 Beast ransomware attack with approximately 400 GB of patient data exfiltrated. 22,017 patients affected. Here is what to do.

You have options. Scroll for the exact action steps, what your provider’s response covers, and what your health data needs beyond credit monitoring.

By HealthConsent Editorial Last updated Sources & methodology

Timeline

Sep 2, 2025

Unauthorized access; ransomware encryption

Sep 2, 2025

Attacker gained access

Sep 16, 2025

Beast posts MedPeds to dark-web leak site (~400 GB claimed)

Mar 16, 2026

Filed with HHS OCR; Maine + Vermont AG filings; notifications mailed

Data exposed

01

High-risk identity

Enables financial + identity theft

Date of birth Social Security number (per plaintiffs' firm summaries)

02

Health records

Don't expire and can't be reissued

Patient medical records

03

Contact & insurance

Phishing + targeted scams

Full name Home address Phone number

Class actions filed by

These firms have publicly announced investigations. You may be eligible to join. We are not a law firm and cannot give legal advice.

Strauss Borrelli (publicly investigating) Lynch Carpenter (publicly investigating) Shamis & Gentile (publicly investigating) Migliaccio & Rathod (publicly investigating) Almeida Law Group (publicly investigating) Bryson Harris Suciu & DeMay (publicly investigating)
If you received a letter

Your action plan, in five steps.

You have more rights than the notification letter explains. Each step below is a concrete thing you can do today. Full detail and timing in the sections that follow.

01

Accept credit monitoring

It’s the floor of the response. Take it.

02

Freeze your credit

Free at Equifax, Experian, TransUnion.

03

File IRS Form 14039

Prevent fraudulent tax return under your SSN.

04

Review your EOBs

Insurance statements catch medical identity theft early.

05

Stop the ongoing flow

Credit monitoring doesn’t cover your health records. HealthConsent does.

Jump to step 5: protect my health data

What happened

MedPeds Associates of Sarasota is an internal medicine and pediatrics (“med-peds”) group practice at 1931 Tuttle Avenue, Sarasota, Florida. The dual focus means the patient base spans infancy through senior age.

On September 2, 2025, an unauthorized actor encrypted files on MedPeds’s network. The Beast ransomware group posted the practice to its dark-web leak site on September 16, 2025, claiming approximately 400 GB of exfiltrated data. The FBI was engaged. The forensic review took six months. On March 16, 2026, MedPeds mailed notification letters and filed with the Maine and Vermont Attorneys General. The HHS OCR filing followed in late March 2026 confirming 22,017 affected (the Maine AG letter cited 21,430 — the OCR figure is the authoritative federal count).

What was stolen

Names, dates of birth, addresses, phone numbers, and patient medical records. Plaintiffs’ firm summaries also list Social Security numbers, though the Maine AG filing form indicated SSN status as ambiguous.

What MedPeds is offering

Notices reference complimentary credit monitoring and identity-theft protection, though the Maine AG filing form explicitly checked “Credit monitoring offered: No.” Read your specific letter carefully for enrollment details.

What to do

  1. Place free credit freezes at all three bureaus.
  2. File IRS Form 14039.
  3. If your child was a patient, freeze their credit too. Minors face long-tail synthetic-identity-theft risk.
  4. Stop the ongoing flow of your medical record data. HealthConsent files HIPAA restriction requests so the data exposed in this breach is not continuously re-shared.

Continue reading

Stop your data from spreading further

Credit monitoring covers your wallet. HealthConsent covers your health records.

Your stolen diagnoses, test results, and medical record numbers don’t expire when the free credit-monitoring window ends. HealthConsent automates HIPAA restriction requests and opt-outs across providers, insurers, HIEs, and prescription networks so the data taken in this breach can’t keep being shared and sold by other entities downstream.

Protect my health data

Cancel anytime · Family plan covers spouses + dependents

Sources & further reading

Official HHS OCR Breach Portal: ocrportal.hhs.gov

About this page

This page is compiled from public regulatory filings, the breached entity’s own disclosures, and reporting from established healthcare-privacy outlets. Some sections are assembled with the help of automated research and may contain errors, summaries that lag the underlying source, or details that have since been revised. Treat it as a starting point, not legal advice or an authoritative record. If you spot something inaccurate, the linked sources above are the canonical record. For questions about your individual situation, contact the breached entity directly or consult a licensed attorney.