Florida Hand Center listed on Rhysida ransomware leak site

• Ransomware group: Rhysida
• Country: United States
• Sector: Healthcare
• Announcement date: July 8, 2025

Florida Hand Center targeted by Rhysida ransomware group

The Florida Hand Center has been listed on the leak site of the Rhysida ransomware group following allegations of a data breach. The group has published data they claim belongs to the healthcare provider on their dedicated leak platform, marking a significant potential incident for the medical facility.

Details of the alleged attack

According to the claims made by the Rhysida ransomware group, they successfully gained access to the systems of the Florida Hand Center. The group has cited the date of the incident as July 8, 2025. This announcement was made public on their leak site on July 8, 2025.

The Rhysida group is known for employing double-extortion tactics. In a double-extortion scheme, threat actors do not merely encrypt an organization's data to disrupt operations; they also steal sensitive information before the encryption occurs. The attackers then threaten to leak this stolen data on public forums or leak sites if the ransom is not paid. This tactic is specifically designed to increase pressure on the victim by threatening reputational damage and regulatory scrutiny.

The group has a known history of targeting the healthcare and public sectors, leveraging the sensitive nature of the data held by these institutions to maximize their leverage during negotiations.

Data involved in the leak

The group has provided evidence to support their claims, including screenshots that display samples of various documents. These samples reportedly resemble highly sensitive materials, including personal identification cards, medical forms, and patient records. Based on the available information, the following types of data are allegedly involved in the breach:

• Personal identification information
• Medical records

No specific information was provided regarding the total size of the data stolen or the exact file count. Additionally, no ransom demand has been disclosed in the current announcement.

About Florida Hand Center

Florida Hand Center is a healthcare provider specializing in non-surgical and minimally invasive treatments for hand, wrist, and elbow conditions. The organization serves patients within the Florida regions of Punta Gorda, Port Charlotte, and Fort Myers.

Potential impact and industry implications

The alleged breach may pose a significant risk of exposure for sensitive patient health data and personal identification information. Because the Florida Hand Center is a US-based healthcare provider, this incident could lead to legal proceedings and administrative penalties under HIPAA regulations. Such regulatory frameworks are designed to ensure the privacy and security of protected health information, and violations can result in substantial oversight and fines.

Furthermore, the exposure of such data may create secondary risks for the affected patients, such as identity theft and targeted phishing attacks. When personal and medical information is leaked, attackers can use it to craft highly convincing social engineering campaigns tailored to the specific victim.

Given the past activities of the Rhysida group, it is possible that the institution may face operational disruptions and reputational damage. For organizations in the healthcare sector, such incidents underscore the importance of robust cybersecurity frameworks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining offline backups, conducting regular employee training to prevent phishing, and ensuring continuous monitoring of network traffic to detect unauthorized access early.