Florida Lung Listed by rhysida Ransomware Group

On May 20, 2025, the Florida Lung, Asthma & Sleep Specialists medical practice appeared on the leak site of the Rhysida ransomware group. Internal files containing patient and operational data were allegedly exfiltrated during a ransomware attack on the Florida-based pulmonary, critical care, allergy, and sleep-disorder clinic.

What's Publicly Reported from Reporting

Public reporting indicates the clinic’s internal documents were posted to the Rhysida leak portal. The exact volume of records and the full list of exposed data types remain unclear, but ransomware incidents of this nature typically involve clinical notes, billing records, insurance details, and contact information. No confirmed patient count has been released by the practice or the attackers. The incident follows the group’s standard pattern of encrypting systems, exfiltrating data, then publishing samples when ransom demands go unmet.

Why This Matters for You and Your Family

When a medical provider is breached, the information exposed is among the most sensitive you entrust to anyone. Names, dates of birth, Social Security numbers, diagnoses, treatment histories, and insurance identifiers can all appear in the stolen files. For you or your family members who have been patients, this single breach can fuel years of identity theft, insurance fraud, and targeted scams. Medical data sells at a premium on underground markets precisely because it is so difficult to change and so useful for impersonation.

The Doxxing and Identity-Chain Implications

Credential leaks and internal documents rarely stay isolated. An email address or phone number taken from a clinic file can be cross-referenced with gaming accounts, social-media handles, or school records. Once attackers link your online identities to your real name and address, the risk of doxxing, swatting, or extortion rises sharply. Children’s gaming accounts are especially vulnerable because kids often reuse passwords or email addresses tied to family medical records. A single exposed record can therefore cascade into multiple account takeovers across platforms.

Rhysida’s Publicly Known Track Record

Public reporting attributes the Rhysida ransomware group’s emergence to mid-2023. The gang has since hit hospitals, municipalities, and private businesses across several countries. Notable prior victims include healthcare providers and local governments whose data appeared on the same leak site now listing Florida Lung. Their typical playbook begins with initial access through phishing or exploited remote-desktop credentials, followed by rapid exfiltration of sensitive files and deployment of ransomware. When payment is refused, they publish samples and threaten full data dumps on a countdown clock.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what chains back to this claimed breach.
• Rotate any password you used at Florida Lung, Asthma & Sleep Specialists anywhere else it is reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing accounts.

The speed with which stolen medical data travels across criminal networks means quick, decisive action is the only reliable defense. DoxxScan by GalaxyWarden delivers that speed through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start protecting what matters most before the next wave of abuse begins.