Florida Lung Listed by rhysida Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Patients and staff connected to Florida Lung, Asthma & Sleep Specialists face a practical concern after the organization was listed by the Rhysida ransomware group. When internal files from a medical practice are claimed to have been taken, the people whose records may sit inside those files need clear information about what is known, what remains unconfirmed, and what steps they can take next.

Public reporting on 20 May 2025 noted that Florida Lung appeared on the group’s leak site following an alleged ransomware attack in which internal files were said to have been exfiltrated. The number of people affected has not been disclosed, and independent confirmation of the full scope remains limited.

Breaking down the breach

According to the available record, Florida Lung was listed by the Rhysida ransomware group on or around 20 May 2025. The listing asserts that internal files were exfiltrated during a ransomware attack. No public figure has been given for the number of individuals whose information may be involved, and details such as the precise date of initial access, the method of intrusion, the volume of data taken, or any ransom demand have not been disclosed in the facts provided.

What is stated is that the incident involved the claimed theft of internal files. Beyond that description, the public record on this specific event is sparse. Readers should treat the leak-site listing as a claim by the threat actor rather than as independently verified fact unless further confirmation emerges from the organization or regulators.

The group behind it: rhysida

Rhysida is a ransomware operation that has been active in recent years and is known for a double-extortion approach: encrypting systems while also copying data and threatening to publish it if a ransom is not paid. The group typically posts victim names and sample files on a dedicated leak site to increase pressure. Public reporting has associated Rhysida with attacks across multiple sectors, including healthcare and professional services, though each incident must be evaluated on its own evidence.

In this case the group claims Florida Lung as a victim and asserts that internal files were exfiltrated. No additional statements attributed specifically to Rhysida about this organization—such as file counts, screenshots of particular records, or deadlines—are contained in the facts supplied. The listing itself is therefore best understood as an unverified claim pending any confirmation or denial from Florida Lung or official sources.

Florida Lung and its sector

Florida Lung, Asthma & Sleep Specialists describes its mission as providing comprehensive medical care to patients with pulmonary disease, critical illness, allergic diseases, and sleep disorders. As a specialty medical practice it operates in the healthcare sector, where organizations routinely handle clinical notes, diagnostic results, appointment histories, insurance details, and other protected health information alongside administrative and staff records.

A breach involving a pulmonary and sleep-medicine practice is consequential because the data such clinics hold is both sensitive and long-lived. Even limited exposure of internal files can create lasting privacy and identity risks for patients and employees. Healthcare providers are also subject to regulatory expectations around breach notification and safeguards, which adds organizational and legal weight to any confirmed incident.

What was likely exposed

The facts state that internal files were exfiltrated in a ransomware attack. No further breakdown of file types, patient counts, or specific data categories has been disclosed. Organizations of this kind typically maintain electronic health records, billing and insurance information, referral correspondence, staff personnel files, and operational documents. Whether any or all of those categories were among the files claimed by Rhysida remains unconfirmed.

Because the exact contents have not been publicly itemized, it is not possible to state with certainty what personal or clinical data, if any, left the organization’s control. Affected individuals should assume that the possibility of exposure exists until the practice or relevant authorities provide clearer inventories.

Why it matters

For patients, the practical risks include potential misuse of medical or identity information for fraud, targeted phishing that references real clinical details, or longer-term privacy harm if sensitive diagnoses become public. For staff, personnel or payroll data could enable similar identity-related problems. Even when files are not immediately published, the mere fact of exfiltration creates an ongoing uncertainty that can last months or years.

For the organization the consequences can include operational disruption, notification costs, regulatory scrutiny, and erosion of patient trust. These outcomes do not require proof of negligence; they follow from the simple reality that healthcare data is valuable to criminals and highly personal to the people it describes. Clear communication and timely support for those who may be affected remain the most useful responses once an incident is confirmed.

Were you affected?

If you are a current or former patient or employee of Florida Lung, Asthma & Sleep Specialists, monitor official notices from the practice and from any state or federal regulators that may later publish findings. Watch financial and insurance statements for unfamiliar activity, and treat unsolicited messages that reference your medical history with caution. Consider placing a fraud alert with the major credit bureaus if you believe personal identifiers may have been involved.

You can also run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets. Doing so does not confirm or rule out involvement in this specific incident, but it can surface other exposures that warrant attention. Stay alert for further statements from Florida Lung as more verified detail becomes available.

AICompiled with AI assistance from public sources and published under our editorial standards.