Florida Hand Center Listed by rhysida Ransomware Group

On July 8, 2025, the Florida Hand Center appeared on the leak site operated by the Rhysida ransomware group. Patient records, internal documents, and other sensitive files from the medical practice were allegedly exfiltrated and listed for download, placing the personal and medical information of an unknown number of individuals at risk.

What's Publicly Reported from Reporting

Public reporting indicates the Florida Hand Center, which provides non-surgical and minimally invasive care for hand, wrist, and elbow conditions in Punta Gorda, Port Charlotte, and Fort Myers, was hit by a ransomware incident. The attackers extracted internal files before encrypting systems or disrupting operations. As of the listing date, the full volume of stolen data and exact number of affected patients remain undisclosed. The leak site offers the archive for anyone to download, a common tactic intended to pressure victims and demonstrate the attackers’ access.

Why This Matters for You and Your Family

When a local medical provider’s systems are breached, the information exposed often includes names, addresses, dates of birth, Social Security numbers, insurance details, and clinical notes. This data can be used to file fraudulent tax returns, open accounts in your name, or build a profile for more targeted scams. For you and your family, the breach means heightened risk of identity theft that can linger for years. Medical details add another layer: they can be sold on underground markets or leveraged in phishing emails that reference your specific conditions to appear legitimate.

Medical practices remain prime targets because patient records contain a rich mix of personally identifiable information and health data that retains value long after the initial theft.

The Doxxing and Identity-Chain Risks

Stolen medical files frequently serve as the foundation for larger doxxing campaigns. Attackers cross-reference patient addresses, phone numbers, and email addresses with credentials leaked in earlier breaches. Once they link an email to a gaming username or social-media handle, the chain extends quickly. A child’s Roblox or Fortnite account tied to the same family email can be compromised, exposing chat logs, payment methods, and location data. These connections allow criminals to harass family members directly or sell complete identity packages that include both parental and children’s information.

Rhysida’s Publicly Known Track Record

Public reporting attributes the Rhysida ransomware group with emerging in 2023. The group has targeted hospitals, municipalities, and private businesses across multiple countries. Its typical playbook involves gaining initial access through phishing or exploited remote desktop services, exfiltrating data before encryption, and then publishing samples on its leak site when ransom demands go unpaid. The group’s extortion style combines data leaks with threats to release sensitive patient or employee records, aiming to create reputational damage that forces payment.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles that may have been exposed in this or earlier incidents.
• Rotate any password you used at the Florida Hand Center patient portal or associated services, then enable two-factor authentication through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next credential leak that touches your family is caught and addressed within hours.
• Cover the household with DoxxScan family protection that includes dependents and children’s gaming accounts, which often chain back to the same family address or email and become gateways for further takeovers.
• Let remediation specialists handle the time-consuming work of submitting takedown requests to data brokers and monitoring underground forums where the stolen Florida Hand Center files may surface.

The incident underscores that even small, specialized clinics can become entry points for attackers seeking everyday families’ information. Taking deliberate steps now limits how far the stolen data can travel. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping that connects scattered online handles to real identities, and hands-on remediation by specialists who manage takedowns for you and your entire household, including children’s gaming accounts that are frequently swept up in these cascades.