Retina Group of Florida Data Breach 2025: 152,691 Patients Affected After November 2024 Network Intrusion. What To Do

Retina Group of Florida (legal entity Retina Florida MSO, LLC, headquartered at 6333 N. Federal Highway, Fort Lauderdale, FL) is a retina-only ophthalmology practice with 25 locations across Broward, Collier, Charlotte, Hernando, Hillsborough, Lee, Palm Beach, Pinellas, Sarasota, and St. Lucie Counties. In operation for more than 40 years, the practice specializes in retinal, macular, and vitreoretinal conditions including age-related macular degeneration, diabetic retinopathy, and retinal detachment. The practice disclosed a four-day intrusion of its network that ran from November 6 through November 9, 2024, and filed a HIPAA breach report with HHS OCR on September 3, 2025 listing 152,691 affected individuals. Notification letters began mailing the week of September 16, 2025 with 12 months of complimentary TransUnion Cyberscout credit monitoring and identity-theft protection. The practice also filed breach notifications with at least 13 state attorneys general, including California, Iowa, Maine, Massachusetts, Montana, Nebraska, New Hampshire, Oregon, Rhode Island, South Carolina, Texas, Vermont, and Washington. Multiple plaintiff firms have opened class-action investigations; no consolidated complaint has been publicly docketed as of this writing.

Timeline

• November 6, 2024 — An unauthorized actor gains access to a portion of the Retina Group of Florida computer network.
• November 9, 2024 — Suspicious activity indicative of intrusion is identified on the network; the intrusion is contained the same day, four days after access began.
• August 18, 2025 — The forensic file review concludes and the affected-individual list is finalized, per HIPAA Journal’s reporting.
• September 3, 2025 — Retina Florida MSO files a HIPAA breach report with HHS OCR categorized as a Hacking/IT Incident at Network Server, listing 152,691 individuals.
• September 10, 2025 — Plaintiff firms including Strauss Borrelli, Edelson Lechtzin, Pittman Dutton, Schubert Jonckheer & Kolbe, Federman & Sherwood, Lynch Carpenter, and Srourian Law Firm publicly announce class-action investigations.
• Week of September 16, 2025 — Individual notification letters begin mailing to affected patients. A dedicated assistance line (833-799-4243) and 12 months of complimentary credit monitoring and identity-theft protection are offered.

What was exposed

Per reporting by ClassAction.org and WinkNews drawing on the entity’s notification, exposed data may include:

• Names and contact information
• Dates of birth
• Social Security numbers
• Driver’s license numbers or copies
• Health insurance information
• Medical records and treatment information
• Payment information

The breach compromised both personally identifiable information (PII) and protected health information (PHI). The HHS OCR portal entry categorizes the affected location as Network Server.

What Retina Group of Florida is offering

Affected individuals are offered:

• 12 months of complimentary TransUnion Cyberscout credit monitoring and identity-theft protection services. TransUnion Cyberscout provides credit monitoring, identity theft resolution services, and dark-web surveillance.
• A dedicated assistance line at 833-799-4243, Monday through Friday from 8:00am to 8:00pm Eastern.
• Notification letters with enrollment instructions; recipients must enroll within the window specified in their letter to activate the monitoring.

Retina Group of Florida had not posted a substitute notice on its public website as of BankInfoSecurity’s reporting, and no breach notice URL was publicly accessible on the practice’s website as of the June 2026 update to this page. Patients should rely on the mailed notice for the activation code and enrollment deadline. The practice’s Chief Operating Officer, Shannon Rogers-Cruz, filed the breach notifications with state attorneys general.

Class-action posture

Multiple plaintiff firms have publicly announced investigations into the breach since September 10, 2025, including Strauss Borrelli PLLC, Edelson Lechtzin LLP, Pittman Dutton Hellums Bradley & Mann, Schubert Jonckheer & Kolbe LLP, Federman & Sherwood, Lynch Carpenter LLP, Srourian Law Firm, and Wilshire Law Firm. As of the last update to this page, no consolidated complaint or court docket number has been publicly identified. The HHS OCR investigation remains open per the portal entry.

Reporting from WinkNews flagged the roughly ten-month gap between detection (November 9, 2024) and patient notification (September 16, 2025) as a likely focal point for any litigation, citing breach-response expert commentary that statutory notification should generally happen much sooner.

What to do if you may be affected

1. Enroll in the 12-month TransUnion Cyberscout credit monitoring offered by Retina Group of Florida using the activation code in your mailed notification letter. Do not wait; enrollment windows typically close within 90 days of letter receipt.
2. Freeze your credit at Equifax, Experian, and TransUnion. It is free, takes about ten minutes per bureau online, and blocks new-account fraud. This is the single highest-leverage step given that Social Security numbers and driver’s license information are within the reported exposure.
3. Watch for medical identity theft. Request copies of your Explanation of Benefits from your health insurer and verify the listed claims are yours. Report unfamiliar claims to your insurer and to HHS OCR.
4. Request an IRS Identity Protection PIN at irs.gov/ippin. Tax-refund fraud is a leading attack pattern when Social Security numbers are exposed.
5. Be skeptical of inbound calls, texts, or emails referencing the breach or Retina Group of Florida. Threat actors routinely follow large healthcare breaches with targeted phishing.
6. Call the dedicated assistance line at 833-799-4243 (Mon-Fri, 8am-8pm ET) with enrollment or eligibility questions.
7. Stop the ongoing flow of your retinal and eye care records. HealthConsent files HIPAA restriction requests so the ophthalmology and retinal treatment data exposed in this breach is not continuously re-shared across insurance networks, data brokers, and downstream health information exchanges.

Sources

• HHS Office for Civil Rights Breach Portal
• Maine Attorney General — Retina Florida MSO, LLC d/b/a Retina Group of Florida breach filing
• HIPAA Journal — Florida Eye Care Provider Data Breach Affects 153,000 Patients
• BankInfoSecurity — 2 Eye Care Practice Hacks Affect 260,000 Patients, Staff
• WinkNews — Florida patients at risk after major data breach at eye care provider
• ClaimDepot — Retina Group of Florida Data Breach Affects 153,429 Patients (multi-AG source aggregation)
• ClassAction.org — Retina Group of Florida Data Breach Impacts 152K; Lawyers Investigate
• PRNewswire — PRIVACY ALERT: Retina Group of Florida Under Investigation for Data Breach of 152,691 Patient Records
• Strauss Borrelli PLLC — Retina Group of Florida Data Breach Investigation
• Edelson Lechtzin LLP — Retina Florida MSO, LLC d/b/a Retina Group of Florida class-action investigation
• Pittman Dutton Hellums Bradley & Mann — Retina Group of Florida Data Breach
• Federman & Sherwood — Retina Group of Florida Data Breach Investigation