Modernizing Medicine (ModMed), a provider of electronic health records (EHR) and healthcare IT services, suffered a data breach in July 2025. An unauthorized actor accessed and exfiltrated sensitive files between July 9–10, 2025, compromising personally identifiable information (PII) and protected health information (PHI). Exposed data included full names, addresses, Social Security numbers, medical records, health insurance details, billing codes, prescription information, and treatment histories. The breach affected at least 737 Massachusetts residents, with additional victims across multiple practices. ModMed detected suspicious activity on July 21, 2025, confirmed the breach on July 29, and began notifying impacted parties in September–October 2025. The company responded by blocking further access, engaging cybersecurity experts, and reporting to law enforcement. Affected individuals were offered free credit monitoring and identity theft protection. The incident highlights risks to patient privacy, financial fraud, and medical identity theft, with potential long-term reputational and operational consequences for ModMed.