Medical Associates of Brevard hit by BianLian ransomware; 246,711 patients data exposed
Learn More
Medical Associates of Brevard, LLC (MAB), a Florida-based primary care provider is reporting a ransomware attack that compromised the personal and protected health information of 246,711 current and former patients. The BianLian ransomware group claimed the attack.
The cyberattack occurred on January 17, 2025. On January 23, 2025, the BianLian ransomware gang added the Medical Associates of Brevard to its dark web leak site, claiming to have stolen extensive data from the healthcare provider.
The breach went undetected for nearly six months until Medical Associates of Brevard discovered the security incident on July 7, 2025.
Exposed data includes:
- Names
- Dates of birth
- Social Security numbers
- Driver's license numbers/state identification numbers
- Medical treatment information
- Health insurance information
- Financial account information (for a limited number of individuals)
Medical Associates of Brevard began notifying affected patients on September 5, 2025, more than eight months after the initial breach occurred.
The healthcare provider is offering at least 12 months of complimentary credit monitoring and identity restoration services to all affected individuals.
Multiple law firms have announced investigations into potential class action lawsuits against Medical Associates of Brevard, citing inadequate cybersecurity measures and the extensive delay in notifying affected patients.
