MalwareHealthcareHealthcareRansomwareData EncryptedCustomer Data InvolvedHealth (basic)Identity (basic)PHILowContained

Medpeds

bd_97aaf76c233ac1b6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 2, 2025

Filed

Mar 24, 2026

To disclose

29 weeks

Affected

62state residents only

Linked

2 records

Confidence

64%

Full breach record for Medpeds →

MEDPEDS experienced a ransomware incident on September 2, 2025, where an unknown entity gained access to their computer system and encrypted data. Patient medical records, names, dates of birth, addresses, and phone numbers were affected. MEDPEDS engaged a forensic firm, contacted the FBI, and implemented additional security safeguards. No misuse of data has been observed.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d29 weeks discovery → filing

Incident timeline

discovery → filing · 29 weeks / 203 days

Sep 2, 2025

Begins

Sep 2, 2025

Discovered

Mar 24, 2026

Filed

vs. sector median

+20 wks slower

This filing is one of 2 records about the same incident.View merged incident

A leak claim by beast about this victim was first seen 189 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebeastbd_16eb2006f744d2a32025-09-01 · +204dCandidate

Name: Medpeds
norm: medpeds
Domain: medpedsdocs.com

Name: Medpeds
norm: medpeds
Domain: medpedsdocs.com
Industry: Healthcarellm

Discovered: Sep 2, 2025
Breach occurred: Sep 2, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 16, 2026
Affected individuals: 62state-resident count only
Data types: Health (basic)Identity (basic)PHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Immediately contacted the FBI and worked with their cyber security department

During the incident: Worked to restore our computer system with a forensic firm
Immediately improved our security and protect our system from further unauthorized access
Immediately contacted the FBI and worked with their cyber security department
Implemented additional safeguards to improve data security on our web server infrastructure
Partnered with IDX to answer questions and provide valuable information about the incident
Changes made: Implemented additional safeguards to improve data security on our web server infrastructure
Taking additional steps to protect patient related data from theft or similar criminal activity in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(203 days from discovery to filing)
Compliance flags: MA AG >90dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-449-medpeds-associates-of-sarasota/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2026
Raw hash: bee99ad2297c8c8ba5ddafb00811315b5369f47fa88787f43a123ffba4c29386

Linked disclosures

Ransomware claims (1)

Reporting entityMedpeds

Victim entityMedpeds

Incidentdiscovered Sep 2, 2025

Stated responseWorked to restore our computer system with a forensic firm

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov