Mid Florida Dermatology & Plastic Surgery Listed by qilin Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 25, 2026, the ransomware group qilin listed Mid Florida Dermatology & Plastic Surgery on its data-leak site. The group claims it exfiltrated internal files during a ransomware intrusion. No confirmation of the incident has been issued by the organization itself, and the number of individuals whose information may be involved is not publicly known. Ransomware operators continue to target healthcare entities as part of broader patterns of data theft followed by public disclosure when ransom demands are unmet. The listing places this Florida-based medical practice among organizations whose internal systems have been claimed as compromised by an active threat group.

Breaking down the breach

The only confirmed public record of the event is the appearance of Mid Florida Dermatology & Plastic Surgery on qilin’s leak site on the reported date. The group states that internal files were taken. No further details—such as the date of the initial intrusion, the volume of data removed, the encryption status of systems, or any ransom demand—are available from the listing or from independent reporting. The organization has not released a statement describing its response or the scope of the activity.

Who is qilin?

Qilin operates as a ransomware-as-a-service group that supplies encryption tools and a leak platform to affiliated attackers. Public records of its activity show repeated use of double-extortion tactics, in which data is copied before encryption and then threatened with publication. The group maintains a site where it lists victims that have not paid, a method observed across multiple incidents involving different sectors. Its operations are documented in law-enforcement alerts and security-industry reporting as ongoing and adaptive.

Who is Mid Florida Dermatology & Plastic Surgery?

Mid Florida Dermatology & Plastic Surgery provides clinical dermatology and cosmetic surgery services. Organizations of this type routinely process patient registration data, insurance information, medical histories, and imaging records in order to deliver care and meet billing requirements. A successful intrusion at such a practice can expose both clinical and administrative systems that store these records.

What data was at risk

The listing refers only to “internal files” without enumerating specific categories or record counts. The exact contents therefore remain unconfirmed. Medical practices of this kind commonly maintain electronic health records, demographic details, insurance identifiers, and internal correspondence; however, whether any of these data types were among the claimed exfiltration cannot be verified from the available information.

Why it matters

Exposure of internal files from a medical provider can create downstream risks for patients, including potential misuse of health information for fraud or targeted scams. For the organization, the incident may trigger regulatory notification obligations under health-privacy rules and could affect relationships with insurers and referring physicians. Because the scale and sensitivity of the claimed data are not specified, the precise impact on individuals cannot yet be assessed.

Were you affected?

Individuals who have received services from Mid Florida Dermatology & Plastic Surgery should monitor statements from the practice and any required breach notifications. Practical first steps include reviewing credit reports, placing fraud alerts if concerned about identity misuse, and changing passwords for any patient portals. Readers can also run a free exposure scan of their email address against known breach datasets to check for prior appearances of their information.

AICompiled with AI assistance from public sources and published under our editorial standards.