Brevard Skin and Cancer Center has announced a recent cyberattack that exposed sensitive patient data, including medical and personal information. While no misuse has been confirmed, this breach could pose serious risks to affected individuals.
Brevard Skin and Cancer Center’s Data Breach Investigation
Brevard Skin and Cancer Center (“Brevard”), a Florida-based healthcare provider, recently reported a data breach involving unauthorized access to its internal systems, compromising sensitive patient information. The organization stated that it became aware of the breach on October 14, 2025, but further investigation revealed the breach occurred on or around September 28, 2025. Cybersecurity experts were brought in immediately to contain the incident, investigate the scope, and implement necessary remediation measures.
The breach involved the exfiltration of protected health information (PHI) stored on Brevard’s data systems. In response, Brevard launched an extensive review of the impacted systems to identify affected individuals and determine exactly what information was exposed. Although the organization has not found evidence of identity theft resulting from the breach, it acknowledged the high sensitivity of the data involved and the potential risks posed to patients.
Brevard’s swift action included notifying federal law enforcement, specifically the FBI, and beginning regulatory notifications. The company also undertook a broad review of its privacy and security practices to bolster its cybersecurity defenses. As part of its mitigation efforts, Brevard is offering affected individuals 24 months of free credit monitoring and identity protection through IDX, which includes services such as CyberScan monitoring, $1 million in insurance coverage, and full ID theft recovery support.
This breach is a stark reminder of the growing threat of cyberattacks in the healthcare industry, where organizations hold vast amounts of sensitive data. Even with no immediate evidence of fraud, individuals whose data was compromised may face long-term exposure to identity theft, insurance fraud, and other risks. Brevard’s breach underscores the critical need for strong cybersecurity policies and responsive legal avenues for those impacted.
When Did This Breach Occur?
The unauthorized access to Brevard’s systems occurred on or around September 28, 2025. The breach was discovered approximately two weeks later, on October 14, 2025.
What Information Was Breached?
The following categories of protected health information (PHI) may have been compromised:
- Full name
- Date of birth
- Home address
- Social Security Number
- Phone number
- Email address
- Diagnosis and clinical information
- Billing and claims information
Note: Financial account numbers and credit/debit card data were not believed to be involved.
What You Can Do
If you believe you may have been impacted by this breach, there are several important steps you can take immediately:
- Enroll in Credit Monitoring: Brevard is offering free IDX identity protection and credit monitoring services for 24 months. Visit the provided link or scan the QR code to activate your protection.
- Place a Fraud Alert or Credit Freeze: Contact any of the three major credit bureaus to place a fraud alert or freeze your credit to prevent unauthorized accounts.
- Review Medical and Insurance Records: Monitor for any unusual medical activity or fraudulent claims filed in your name.
- Report Suspicious Activity: If you suspect misuse of your information, report it immediately to the FTC and your local authorities.
- Consult Legal Help: If you received a breach notice, you may be entitled to financial compensation. A qualified data breach lawyer can help assess your eligibility.
Class Action U is here to support you. We make it easy to connect with legal professionals who specialize in data breach lawsuits. Don’t let your rights be overlooked.
File a Data Breach Lawsuit Against Brevard Skin and Cancer Center
If you received a notification letter from Brevard Skin and Cancer Center about this data breach, you may be eligible to join a class action lawsuit. Victims of data breaches often face long-term risks such as identity theft, fraudulent medical claims, or damage to credit scores. Legal action can help recover compensation for these harms and hold Brevard accountable for failing to protect your sensitive information.
It’s important to act quickly. Legal deadlines may apply, and the longer you wait, the harder it may be to recover losses. If your personal health or identity information was exposed, you deserve to understand your rights and options.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
