MalwareHealthcareHealthcareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedPIIIdentity (basic)PHIHealth (basic)LowContained

MedPeds Associates of Sarasota

bd_4bb5a1b5d650cfb9 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 2, 2025

Filed

Mar 16, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for MedPeds Associates of Sarasota →

MedPeds Associates of Sarasota notified Nebraska AG that on September 2, 2025, an unknown actor gained access to its systems, encrypted data using ransomware, and exfiltrated patient information including names, DOBs, addresses, phone numbers, and medical records. The company engaged a forensic firm, contacted the FBI, and implemented additional security safeguards. No evidence of data misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 2, 2025

Begins

Sep 2, 2025

Discovered

Mar 16, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_4e606e92c99d61622026-03-16Verified
Indiana State AGbd_bf13059c2b0bb4a62026-03-16Verified
Vermont State AGbd_f5fef79475594d252026-03-16Verified
HHS OCRbd_693ed259aa941ef62026-03-13 · +3dVerified

Name: Medpeds
norm: medpeds
Domain: medpedsdocs.com

Name: MedPeds Associates of Sarasota
norm: medpeds associates of sarasota
Industry: Healthcarellm

Discovered: Sep 2, 2025
Breach occurred: Sep 2, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 16, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)PHIHealth (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: contacted the FBI and worked with their cyber security department

During the incident: Worked to restore our computer system with a forensic firm
Did not engage with the intruder
Immediately improved our security and protect our system from further unauthorized access
Contacted the FBI and worked with their cyber security department
Implemented additional safeguards to improve data security on our web server infrastructure
Changes made: Implemented additional safeguards to improve data security on our web server infrastructure
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

HHS OCRMar 13 · first

Maine State AG+3d

Indiana State AG+3d

Vermont State AG+3d

Nebraska State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/9d125310-e47d-45a4-b6e5-6fbe63effe80.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 16, 2026
Raw hash: 1b80ee34f776282a27844f0601c8a98618cd432cce62e8044e5583b6d698b16a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMedpeds

Victim entityMedPeds Associates of Sarasota

Incidentdiscovered Sep 2, 2025

Stated responseWorked to restore our computer system with a forensic firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov