The Florida Aquarium Data Breach

The Florida Aquarium, a premier public aquarium and marine conservation facility in Tampa, Florida, recently notified affected individuals that their personal information had been accessed without authorization. Organizations that collect visitor and patron data, including health and identification information, have a responsibility to protect that data from unauthorized access, and any breach involving Social Security numbers alongside medical records and driver’s license numbers deserves a serious response from those affected.

The Florida Aquarium’s Data Breach Investigation

On September 1, 2026, The Florida Aquarium began notifying affected individuals of a data security incident, according to a filing with the Massachusetts Office of Consumer Affairs and Business Regulation. The filing indicates the incident affected 2 Massachusetts residents, though the aquarium has not publicly disclosed the total number of individuals affected nationwide or the specific cause of the breach.

Organizations in the tourism and hospitality sector, including attractions like aquariums and zoos, are increasingly targeted by cybercriminals because they routinely collect and store visitor payment information, membership records, and, in some cases, employee or vendor identification and medical data. When Social Security numbers are exposed together with driver’s license numbers and medical records, affected individuals face an elevated risk of both financial identity theft and more complex forms of fraud, such as someone using stolen identification to open new accounts or obtain medical services fraudulently.

The Florida Aquarium has stated it has no evidence of the misuse or attempted misuse of any potentially impacted information, and is offering 24 months of complimentary identity theft protection services, including credit and CyberScan monitoring and a $1,000,000 insurance reimbursement policy, through IDX. As more information becomes available about the scope and cause of this incident, this page will be updated accordingly.

When Did This Breach Occur?

The Florida Aquarium began notifying affected individuals on September 1, 2026. The organization has not publicly disclosed the specific date the underlying security incident occurred or when it was first discovered.

What Information Was Breached?

According to the notification filed with Massachusetts regulators, the categories of information involved in this breach include Social Security numbers, medical records, and driver’s license numbers. Not every affected individual necessarily had every category of data exposed.

What You Can Do

If you believe you may have been affected by this breach, consider taking the following steps:

• Review your notification letter from The Florida Aquarium carefully and retain a copy for your records.
• Enroll in the complimentary 24-month identity theft protection services offered through IDX before the enrollment deadline.
• Place a fraud alert or security freeze with the three major credit bureaus (Equifax, Experian, and TransUnion).
• Monitor your financial accounts and credit reports regularly for unauthorized activity.
• Request a copy of any police report if you experience identity theft as a result of this incident.

File a Data Breach Lawsuit Against The Florida Aquarium

If you were notified that your personal information was compromised in The Florida Aquarium data breach, you may be entitled to compensation.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.