South Florida Injury Centers and Chickasaw Nation Department of Health Report Separate Data Breaches Two healthcare organizations South Florida Injury Centers (SFIC) and the Chickasaw Nation Department of Health (CNDH) have disclosed recent data breaches, each stemming from distinct security incidents. ### South Florida Injury Centers: Ransomware Attack by Kairos SFIC, a medical practice specializing in auto accident injuries with locations in Tamarac and Port Saint Lucie, Florida, reported a hacking-related breach affecting 1,525 patients. The attack, attributed to the financially motivated threat group Kairos, occurred in early April 2026. Kairos, known for data theft and extortion, claimed to have exfiltrated 45 GB of sensitive data, including: - Patient names - Contact details - Driver’s license numbers - Social Security numbers - Medical histories On April 7, 2026, SFIC was listed on Kairos’ dark web leak site, with samples of the stolen data published after the ransom demand went unpaid. ### Chickasaw Nation Department of Health: Insider Breach The Chickasaw Nation Department of Health in Oklahoma detected an insider breach on April 22, 2026, involving unauthorized access to patient records by a single employee. The investigation revealed the employee had accessed records between December 1, 2025, and April 22, 2026, potentially exposing data from 1,607 patients, including: - Names and ages - Dates of service - Tribal affiliations - Visit reasons - Clinical details (lab/radiology orders) While Social Security numbers were not accessed, the breach highlights risks from internal threats. The organization has not disclosed disciplinary actions taken against the employee. Both incidents underscore ongoing cybersecurity challenges in healthcare, from external ransomware threats to insider risks.