Overview
CPAP Medical Supplies and Services Inc. reported a data breach impacting over 90,000 individuals after a system hacking incident. Sensitive personal information was exposed.
What Happened?
On December 13, 2024, CPAP Medical Supplies and Services Inc., a healthcare provider based in Jacksonville, Florida, experienced an external hacking incident that resulted in unauthorized access to its systems. The company did not discover the breach until June 27, 2025. Written notifications were later sent to affected individuals on August 15, 2025. In total, 90,133 people were impacted.
What Information Was Involved?
The compromised data includes:
- Names
- Other personal identifiers in combination with sensitive details
While the company has not disclosed all data types exposed, this kind of breach can increase the risk of identity theft and fraud.
How Did CPAP Medical Supplies and Services Inc. Respond?
After discovering the incident, CPAP Medical Supplies and Services Inc. investigated the breach, worked with legal counsel, and reported the matter to regulators. The company issued written notices to those impacted and offered two years of free identity theft and credit monitoring services through IDX. These services are designed to help individuals monitor their credit reports and respond to potential fraudulent activity.
What Can You Do If You Were Affected?
If you received a notice about this breach, it is important to take steps to protect yourself:
- Enroll in the free credit monitoring and identity theft protection services offered by IDX
- Monitor your financial and medical accounts for any unusual activity
- Place a fraud alert or credit freeze with credit bureaus if you suspect misuse of your information
- Keep all correspondence related to the breach in case you need it for future claims
Legal Significance
The breach occurred in December 2024 but was not discovered until June 2025, with notifications sent in August 2025. This delay in discovery and notification may raise legal concerns for those affected. At this time, no lawsuits or prior breaches have been reported, but individuals may still have legal rights and remedies.
Did You Receive a Data Breach Notification?
If you received a data breach notification from CPAP Medical Supplies and Services Inc., you may be entitled to compensation or other legal remedies. Contact Almeida Law Group today for a free, no-obligation consultation. Call us at 708-529-5418 or fill out the form below. We are actively investigating this breach and helping victims understand their rights.
Conclusion
Data breaches in the healthcare industry highlight the importance of acting quickly to safeguard your personal information. If you were impacted by the CPAP Medical Supplies and Services Inc. breach, take advantage of the protection services offered, stay alert for suspicious activity, and seek legal guidance to ensure your rights are protected.
