{"id":387,"date":"2023-03-20T01:17:31","date_gmt":"2023-03-20T06:17:31","guid":{"rendered":"https:\/\/kentprotect.com\/?p=387"},"modified":"2023-03-20T01:53:50","modified_gmt":"2023-03-20T06:53:50","slug":"2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/","title":{"rendered":"2021 hack of 447,000 Orlando Family Physicians  individuals&#8217;\/patients&#8217; data results in potential $1.5 million settlement"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"wp-block-paragraph\">(image source: Orlando Family Physicians, 2016)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In April 2021, Orlando Family Physicians suffered a data breach via a successful phishing attack that resulted in the breach of over 447,000 individuals and patients and a potential $1.5 million settlement. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Orlando Family Physicians, LLC, a threat actor, and 447,426 individuals and patients. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">April 15, 2021: Breach starts, and OFP quickly detects the breach <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">April 16, 201: Breach ends<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">May 21, 2021: Orlando Family Physicians discovers the scope of the data breach <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">July 9, 2021:  Orlando Family Physicians begins patient notification <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">July 20, 2021: Orlando Family Physicians posts breach notice on their website and submits the breach notification to HHS<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">September 16, 2021: Class action lawsuit is filed against Orlando Family Physicians in Orange County, Florida <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 03, 2023: Settlement for aggregate cap of $1.5 million receives preliminary approval <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An Orlando Family Physicians employee was successfully phished via email by an attacker, who laterally moved to three other users&#8217; accounts to &#8220;commit financial fraud against OFP&#8221; rather than steal individuals&#8217; or patients&#8217; data (Orlando Family Physicians, 2021, paras. 2-3). OFP contained the incident within 24 hours (Orlando Family Physicians, 2021, para. 2). Nonetheless, the PII or PHI of over 447,426 individuals and patients was breached and included: &#8220;name; demographic information; health information, including diagnoses, providers and prescriptions; health insurance information, including legacy Medicare beneficiary number derived from the individual\u2019s Social Security number or other subscriber identification number; medical record number; patient account number; and passport number&#8221; (HHS, 2021; Orlando Family Physicians, 2021, para. 3). OFP was sued via class action in September 2021 and appears to have settled on a preliminary basis in February 2023 for an aggregate cap of $1.5 million (UniCourt, 2022; <em>LOPEZ MORALES, ALMA et al. vs. ORLANDO FAMILY PHYSICIANS LLC<\/em>, 2023, p. 7). <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Associated incident response costs, &#8220;leading cybersecurity forensics firm,&#8221; M-F call center, breach notification costs, legal costs, potential $1.5 million settlement cost<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Federal: HIPAA and HITECH <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Email phishing<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OFP has self-reported that they are doing additional training on &#8220;email security.&#8221; Thus, user awareness training cannot be understated in this situation. User awareness training is critical for any user with any public-facing access (e.g., email, phone, etc.). Mail gateways must also be employed and synchronized with threat intelligence sources to quickly detect and quarantine malicious links\/files and flag\/remove suspected phishing emails. Having a 24\/7 SOC to monitor inbound email traffic and potentially flag suspicious activity through the entire kill chain\/MITRE framework can also help quickly stop or contain incidents.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Example solutions:<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em><br><\/em><strong>User Awareness:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Knowbe4&nbsp;<a href=\"https:\/\/www.knowbe4.com\/products\/kevin-mitnick-security-awareness-training\/\">https:\/\/www.knowbe4.com\/products\/kevin-mitnick-security-awareness-training\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Proofpoint&nbsp;<a href=\"https:\/\/www.proofpoint.com\/us\/products\/security-awareness-training\">https:\/\/www.proofpoint.com\/us\/products\/security-awareness-training<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Email Gateway:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Barracuda&nbsp;<a href=\"https:\/\/www.barracuda.com\/products\/email-protection\/email-security-gateway\">https:\/\/www.barracuda.com\/products\/email-protection\/email-security-gateway<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Proofpoint&nbsp;<a href=\"https:\/\/www.proofpoint.com\/us\/threat-reference\/email-gateway\">https:\/\/www.proofpoint.com\/us\/threat-reference\/email-gateway<\/a><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HHS. (2021). Research Report. In <em>Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information<\/em>. U.S. Department of Health and Human Services Office for Civil Rights. Retrieved March 20, 2023, from https:\/\/ocrportal.hhs.gov\/ocr\/breach\/breach_report.jsf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">LOPEZ MORALES, ALMA et al. vs. ORLANDO FAMILY PHYSICIANS LLC, Case No.: 2021-ca-009153-o (Ora. Co. 2023). https:\/\/angeion-public.s3.amazonaws.com\/www.OrlandoFPSettlement.com\/docs\/166105841%20Order%20Granting%20Preliminary%20Approval.pdf<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Orlando Family Physicians. (2016, September). <em>logo_ofp_facebook.jpg<\/em>. orlandofamilyphysicians.com. https:\/\/orlandofamilyphysicians.com\/wp-content\/uploads\/2016\/09\/logo_ofp_facebook.jpg<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Orlando Family Physicians. (2021, July 20). <em>Notice of Data Event \u2013 Orlando Family Physicians<\/em>. Retrieved March 20, 2023, from https:\/\/orlandofamilyphysicians.com\/notice\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">UniCourt. (2022, February 23). <em>LOPEZ MORALES, ALMA et al. vs. ORLANDO FAMILY PHYSICIANS LLC<\/em>. Retrieved March 20, 2023, from https:\/\/unicourt.com\/case\/fl-ora-lopez-morales-alma-et-al-vs-orlando-family-physicians-llc-1493711?init_S=chup_ltst<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Commentary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Every cybersecurity professional appreciates the level of transparency on Orlando Family Physician&#8217;s website regarding how they got hacked and the attacker&#8217;s motives. <\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"2021 hack of 447k Orlando Family Physicians individuals&#039;&#039; data results in potential $1.5 million\" width=\"640\" height=\"360\" src=\"https:\/\/www.youtube.com\/embed\/EIGdyhwtsMU?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>(image source: Orlando Family Physicians, 2016) One-sentence summary: In April 2021, Orlando Family Physicians suffered a data breach<\/p>\n","protected":false},"author":4,"featured_media":388,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[68,3,12,383,13,76,63,274,75,61,11,10,77,74,375,14,201,373,69,71,241,45,43,44,218,355,72,70,8,27,220,390,389,384,124,297,67,62,353,370,15],"class_list":["post-387","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-been-pwned","tag-breach-report","tag-breaches","tag-care","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-dark-web","tag-data-breach","tag-east-coast","tag-executive","tag-exfiltration","tag-florida","tag-have-been-pwned","tag-have-i-pwned","tag-haveibeenpwned","tag-healthcare","tag-hipaa","tag-hitech","tag-home-health","tag-hospitals","tag-i-been-pwned","tag-i-have-been-pwned","tag-kent-protect","tag-kentprotect","tag-nursing","tag-orange-county","tag-orlando","tag-patients","tag-phi","tag-pii","tag-pwned","tag-security","tag-sick","tag-skilled-care","tag-summary"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>2021 hack of 447,000 Orlando Family Physicians individuals&#039;\/patients&#039; data results in potential $1.5 million settlement - Kent Protect<\/title>\n<meta name=\"description\" content=\"In April 2021, Orlando Family Physicians suffered a data breach via a successful phishing attack that resulted in the breach of over 447,000 individuals and patients and a potential $1.5 million settlement.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"2021 hack of 447,000 Orlando Family Physicians individuals&#039;\/patients&#039; data results in potential $1.5 million settlement - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"In April 2021, Orlando Family Physicians suffered a data breach via a successful phishing attack that resulted in the breach of over 447,000 individuals and patients and a potential $1.5 million settlement.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-20T06:17:31+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-03-20T06:53:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/logo_ofp_facebook.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"2021 hack of 447,000 Orlando Family Physicians individuals&#8217;\\\/patients&#8217; data results in potential $1.5 million settlement\",\"datePublished\":\"2023-03-20T06:17:31+00:00\",\"dateModified\":\"2023-03-20T06:53:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/\"},\"wordCount\":620,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/logo_ofp_facebook.jpg\",\"keywords\":[\"been pwned\",\"breach report\",\"breaches\",\"care\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"dark web\",\"data breach\",\"east coast\",\"executive\",\"exfiltration\",\"Florida\",\"have been pwned\",\"have I pwned\",\"haveibeenpwned\",\"healthcare\",\"HIPAA\",\"HITECH\",\"home health\",\"hospitals\",\"I been pwned\",\"I have been pwned\",\"kent protect\",\"kentprotect\",\"nursing\",\"orange county\",\"Orlando\",\"patients\",\"PHI\",\"PII\",\"pwned\",\"security\",\"sick\",\"skilled care\",\"summary\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/\",\"name\":\"2021 hack of 447,000 Orlando Family Physicians individuals'\\\/patients' data results in potential $1.5 million settlement - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/logo_ofp_facebook.jpg\",\"datePublished\":\"2023-03-20T06:17:31+00:00\",\"dateModified\":\"2023-03-20T06:53:50+00:00\",\"description\":\"In April 2021, Orlando Family Physicians suffered a data breach via a successful phishing attack that resulted in the breach of over 447,000 individuals and patients and a potential $1.5 million settlement.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/logo_ofp_facebook.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/logo_ofp_facebook.jpg\",\"width\":1200,\"height\":630,\"caption\":\"orlando family physicians logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/03\\\/20\\\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"2021 hack of 447,000 Orlando Family Physicians individuals&#8217;\\\/patients&#8217; data results in potential $1.5 million settlement\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"2021 hack of 447,000 Orlando Family Physicians individuals'\/patients' data results in potential $1.5 million settlement - Kent Protect","description":"In April 2021, Orlando Family Physicians suffered a data breach via a successful phishing attack that resulted in the breach of over 447,000 individuals and patients and a potential $1.5 million settlement.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/","og_locale":"en_US","og_type":"article","og_title":"2021 hack of 447,000 Orlando Family Physicians individuals'\/patients' data results in potential $1.5 million settlement - Kent Protect","og_description":"In April 2021, Orlando Family Physicians suffered a data breach via a successful phishing attack that resulted in the breach of over 447,000 individuals and patients and a potential $1.5 million settlement.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/","og_site_name":"Kent Protect","article_published_time":"2023-03-20T06:17:31+00:00","article_modified_time":"2023-03-20T06:53:50+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/logo_ofp_facebook.jpg","type":"image\/jpeg"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"2021 hack of 447,000 Orlando Family Physicians individuals&#8217;\/patients&#8217; data results in potential $1.5 million settlement","datePublished":"2023-03-20T06:17:31+00:00","dateModified":"2023-03-20T06:53:50+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/"},"wordCount":620,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/logo_ofp_facebook.jpg","keywords":["been pwned","breach report","breaches","care","ciso","cloud","computer security","computers","cyber security","cybercrime","cybersecurity","dallas","dark web","data breach","east coast","executive","exfiltration","Florida","have been pwned","have I pwned","haveibeenpwned","healthcare","HIPAA","HITECH","home health","hospitals","I been pwned","I have been pwned","kent protect","kentprotect","nursing","orange county","Orlando","patients","PHI","PII","pwned","security","sick","skilled care","summary"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/","name":"2021 hack of 447,000 Orlando Family Physicians individuals'\/patients' data results in potential $1.5 million settlement - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/logo_ofp_facebook.jpg","datePublished":"2023-03-20T06:17:31+00:00","dateModified":"2023-03-20T06:53:50+00:00","description":"In April 2021, Orlando Family Physicians suffered a data breach via a successful phishing attack that resulted in the breach of over 447,000 individuals and patients and a potential $1.5 million settlement.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/logo_ofp_facebook.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/logo_ofp_facebook.jpg","width":1200,"height":630,"caption":"orlando family physicians logo"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/03\/20\/2021-orlando-family-physicianss-hack-of-447000-individuals-patients-data-settles-for-potential-1-5-million\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"2021 hack of 447,000 Orlando Family Physicians individuals&#8217;\/patients&#8217; data results in potential $1.5 million settlement"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/387","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=387"}],"version-history":[{"count":5,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/387\/revisions"}],"predecessor-version":[{"id":396,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/387\/revisions\/396"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/388"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}