Rhysida ransomware group claims data leak involving Florida Lung

• Ransomware group: Rhysida
• Country: United States
• Sector: Healthcare
• Announcement date: May 20, 2025

Rhysida claims to have leaked data from Florida Lung

The Rhysida ransomware group has issued a leak announcement targeting Florida Lung, a healthcare organization based in the United States. According to the group's announcement on their leak site, they claim to have compromised the organization's systems and obtained various documents. This announcement, made on May 20, 2025, suggests that data related to the organization's operations has been compromised and implies that additional data may be released in the future.

Ransomware groups often utilize leak sites to exert pressure on their victims. These sites serve as a public platform where the threat actors post evidence of the stolen data to coerce the targeted organization into paying a ransom. This tactic is a central component of modern cyberattacks, where the threat of public exposure is used as leverage.

Details of the alleged data exposure

The group has published various documents on their leak site that they allege were obtained directly from the organization's internal systems. Based on the information provided in the announcement, screenshots have been shared that appear to display a variety of sensitive materials. These materials include personal identification cards, documents similar to passports, and various medical forms.

The specific types of data identified in the claim include:

• Personal identification data
• Medical records

While the group has shared these initial files, they have not provided information regarding the total size of the data stolen or the specific number of files involved. Furthermore, there is no information available regarding a specific ransom demand or the exact date the initial intrusion occurred, other than the date of the announcement itself.

The organization profile

Florida Lung, Asthma & Sleep Specialists is a healthcare organization located in Orlando, Florida. The entity provides comprehensive medical care for patients dealing with pulmonary diseases, critical illnesses, allergic conditions, and sleep disorders.

Implications and industry context

The alleged data leak poses significant risks to the individuals associated with the organization. The exposure of personal identification and medical information can lead to a high risk of identity theft for both patients and employees. Because the target is a healthcare entity, such an incident may trigger legal proceedings under HIPAA regulations, which govern the protection and privacy of sensitive patient health information.

This incident highlights the