Past Patient Lab Information May Be Affected by Data Breach
Your peace of mind matters to us. We want to share information about an incident that occurred at our outpatient laboratory that affected certain patients’ protected health information, and we want to reassure you that we’re taking steps to strengthen our privacy safeguards.
On November 25, 2025, the AdventHealth Daytona Beach outpatient laboratory identified that outpatient lab orders were missing from the lab area. These records were associated with outpatient services provided between September 1, 2025, and September 14, 2025.
The incident occurred during a departmental relocation from the first floor to the second floor, which included construction activities to install a new tubing system. During this process, contracted workers changed the planned project location and accessed an area containing the lab orders without notifying the laboratory team prior to demolition. As a result, the documents were discarded.
We have no evidence that any information has been misused or accessed by an unauthorized person, but out of an abundance of caution, we are informing the individuals impacted. If your information was involved in the data breach, you’ll receive a letter in the mail with more details.
No Social Security numbers, financial information or credit card details were involved, and this incident did not affect the AdventHealth electronic medical record system. The information involved may have included a patient’s name, address, date of birth, telephone number, email address, diagnosis code or health condition and health insurance policy number.
Notifications and Support for Patients
Letters are being mailed to individuals whose information may have been involved. These letters include an offer for one year of complimentary identity monitoring services from Kroll, a global leader in risk management and response.
We also encourage patients to closely monitor their credit file, consider additional safety steps recommended by the Federal Trade Commission and regularly review account statements. If any information on your credit file appears fraudulent, be sure to report it right away.
If you have questions or would like assistance, please call 866-676-0820, Monday through Friday, 8 am to 5:30 pm Central Time (excluding major U.S. holidays). Please have your membership number (from your letter) available when you call.
We sincerely apologize for any worry or disruption that this incident may cause. AdventHealth remains committed to safeguarding your information and continues to improve processes and implement operational changes, including expectations of third-party collaboration, to protect your health information and support your care.
Additional Safety Steps You Can Take
We want you to have the information you need to take extra measures for your safety. These recommendations from the Federal Trade Commission include identity theft protection and details on how to place a fraud alert or a security freeze on your credit file for extra peace of mind.
- Freeze Your Credit File
-
You have a right to place a “security freeze” on your credit report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization. A security freeze is designed to prevent credit, loans and services from being approved in your name without your consent.
However, using a freeze to take control over who gets access to the personal/financial information in your credit report may delay, interfere with or prohibit the timely approval of any subsequent request or application made regarding a new loan, credit, mortgage or any other account involving extension of credit.
A security freeze generally does not apply to existing account relationships and when a copy of your report is requested by an existing creditor or its agents or affiliates for certain types of account review, collection, fraud control or similar activities. There is no charge to place or lift a freeze.
To place a security freeze on your credit report, contact each of the following credit bureaus and clearly explain in the call/letter that you are requesting a security freeze:
- Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com, 1-800-685-1111
- Experian, PO Box 2002, Allen, TX 75013, www.experian.com, 1-888-397-3742
- TransUnion, PO Box 2000, Chester, PA 19016, www.transunion.com, 1-800-916-8800
To request a security freeze, provide your full name (middle initial, Jr., Sr., II, III, etc.), Social Security Number, date of birth; home addresses over the past five years; proof of current address such as a current utility bill or telephone bill; photocopy of government issued identification card (driver’s license or ID card, military ID, etc.); and if you are a victim of identity theft, include a copy of either the police report, investigative report or complaint to a law enforcement agency concerning identity theft.
If you request a security freeze via toll-free telephone or other secure electronic means, credit reporting agencies have one business day after receiving the request to place the freeze. In the case of a request made by mail, the agencies have three business days after receiving your request to place a security freeze on your credit report. Credit agencies must also send written confirmation within five business days and provide a unique personal identification number (PIN) or password, or both, that can be used to authorize the removal or lifting of the security freeze.
To lift the freeze to allow a specific entity or individual access to your credit report, you must call or send a written request to the credit reporting agencies by mail and include proper identification (name, address, and social security number) and PIN or password provided when you placed the security freeze as well as the identities of those entities or individuals you would like to receive your credit report or the specific period of time you want the credit report available. The credit reporting agencies have three business days after receiving a request to lift the freeze for those identified entities or for the specified period of time.
To remove the freeze, you must send a written request to the three credit bureaus by mail and include proper identification (name, address and social security number) and PIN number or password provided when you placed the freeze. The credit bureaus have three business days after receiving the request to remove the freeze.
- Place Fraud Alerts on Your Credit File
-
As an alternative to a security freeze, you have the right to place an initial or extended fraud alert on your credit file at no cost. An initial fraud alert is a one-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If you are a victim of identity theft, you are entitled to an extended fraud alert, which is an alert lasting for seven years. Contact the three credit reporting agencies to activate an alert.
- Monitor Account Statements and Report Fraud or Identity Theft
-
It’s important to remain vigilant by reviewing your account statements regularly, reporting fraud and identity theft concerns right away and changing passwords and security verification questions and answers.
It is always advisable to be vigilant for incidents of fraud or identity theft by reviewing your credit reports, debit/credit card, insurance policy, bank account and other account statements for unauthorized activity, especially over the next 24 months. Activate alerts on your bank accounts to notify you of suspicious activity and change passwords/security verifications as needed, particularly if the same password is used over multiple online accounts. If your medical information was involved, it is also advisable to review the billing statements you receive from your health care providers.
Immediately report suspicious activity, fraudulent charges or suspected identity theft in your insurance statements, provider billing statements, credit report, credit card or bank accounts to your insurance company, bank/credit card vendor, health care provider and law enforcement, including FTC and/or your State Attorney General.
- Order Your Free Annual Credit Reports
-
Visit www.annualcreditreport.com or call 877-322-8228 to obtain one free copy of your credit report annually. Periodically review a copy of your credit report for discrepancies and identify accounts you did not open or inquiries you did not authorize.
For Colorado, Maine, Maryland, Massachusetts, New Jersey, Puerto Rico and Vermont residents: You may obtain additional copies of your credit report, free of charge. You must contact each of the three credit reporting agencies directly to obtain such additional reports.
- Know the Fair Credit Reporting Act (FCRA)
-
The federal Fair Credit Reporting Act (FCRA) promotes the accuracy, fairness and privacy of information in the files of consumer reporting agencies. There are many types of consumer reporting agencies, including credit bureaus and specialty agencies (such as agencies that sell information about check writing histories, medical records and rental history records).
Your major rights under the FCRA are summarized below:
- You must be told if information in your file has been used against you.
- You have the right to know what is in your file.
- You have the right to ask for a credit score.
- You have the right to dispute incomplete or inaccurate information.
- Consumer reporting agencies must correct or delete inaccurate, incomplete or unverifiable information.
- Consumer reporting agencies may not report outdated negative information.
- Access to your file is limited.
- You must give your consent for reports to be provided to employers.
- You may limit “prescreened” offers of credit and insurance you get based on information in your credit report.
- You have a right to place a “security freeze” on your credit report, which will prohibit a consumer reporting agency from releasing information in your credit report without your express authorization.
- You may seek damages from violators.
- Identity theft victims and active-duty military personnel have additional rights.
For more information, including information about additional rights, go to www.consumerfinance.gov/learnmore or write to: Consumer Financial Protection Bureau, 1700 G Street N.W., Washington, DC 20552.
- Obtain More Information From the Federal Trade Commission
-
Go to www.experian.com/credit-advice/topic-fraud-and-identity-theft.html for more information. The Federal Trade Commission also provides information at www.ftc.gov/idtheft and the FTC hotline is 877-438-4338; TTY: 1-866-653-4261. You may also write to FTC, 600 Pennsylvania Ave., NW, Washington, D.C. 20580.