Skip to content 
Author: Steven Salaets
Date: July 2026
Category: Cybersecurity, Healthcare IT, Data Breach Analysis
If you own or manage a medical practice in Southwest Florida, the recent news involving Physicians Primary Care of Southwest Florida should get your attention.
Physicians Primary Care serves patients through offices in Fort Myers, Cape Coral, Estero, and Lehigh Acres. According to publicly available reports, the organization recently reached a proposed settlement related to a 2024 cyberattack that affected more than 170,000 individuals. The organization has denied wrongdoing, and the proposed settlement is not an admission of liability. Regardless of the legal outcome, there is an important lesson here for every healthcare provider in our area.
The question is not whether your practice is too small to become a target.
The question is whether your practice is prepared when someone eventually tries.
Why Healthcare Organizations Continue to Be Prime Cyber Targets
Healthcare organizations have something cybercriminals want.
Patient records contain names, addresses, dates of birth, insurance information, Social Security numbers, and medical histories. Unlike a stolen credit card, that information cannot simply be replaced. It has long term value, which is exactly why healthcare continues to be one of the most targeted industries.
Large hospital systems make headlines, but smaller physician groups, specialty practices, and clinics are attacked every day.
The Biggest Cybersecurity Mistake I See Medical Practices Make
After more than 25 years in enterprise IT leadership, one thing has become very clear.
Many organizations confuse compliance with security.
HIPAA is important. Every healthcare organization should take it seriously.
But checking the compliance boxes does not automatically make your practice secure. We regularly see organizations with security policies on paper while basic protections such as properly configured Microsoft 365 security, multi factor authentication, endpoint monitoring, or security awareness training are either missing or only partially implemented.
Cybersecurity is not a project.
It is an ongoing business function.
Five Questions Every Medical Practice Should Ask Today
If I were meeting with the leadership team of a medical practice tomorrow, these are the first questions I would ask.
Is every user protected with multi factor authentication?
Not just email. Every system that contains patient information or provides remote access should require strong authentication.
How quickly would we know if someone gained access to our network?
Many organizations assume they will immediately know if they are compromised.
Unfortunately, that is rarely the case.
Modern attackers often spend time inside an environment before they encrypt systems or steal data.
Have we actually tested our backups?
Having backups is not enough.
Can you restore your electronic medical records?
Can you recover Microsoft 365?
Can you be operational again in hours instead of days?
Those are very different questions.
Is Microsoft 365 properly secured?
For many medical practices, Microsoft 365 is now the front door to the business.
Email security, conditional access, identity protection, and continuous monitoring have become essential layers of defense.
Would your employees recognize a phishing email?
Technology blocks many attacks.
Your employees stop many more.
Regular security awareness training continues to provide one of the highest returns on investment in cybersecurity.
The True Cost of a Healthcare Data Breach
When people hear about a cyberattack, they usually think about computers.
That is only a small part of the story.
A breach can interrupt patient care, consume hundreds of hours of staff time, trigger legal expenses, require patient notifications, increase insurance costs, damage a practice’s reputation, and create months of operational disruption.
For many organizations, the business impact is far greater than the technical recovery.
What Should Medical Practices Do Next?
You do not need an enterprise sized IT department to significantly improve your security.
You do need a plan.
For most healthcare organizations, that starts with understanding where the biggest risks exist today. That means reviewing your Microsoft 365 environment, validating backups, confirming that security monitoring is in place, testing your incident response procedures, and making sure your team knows how to identify suspicious activity before it becomes a major problem.
Cybersecurity is no longer just an IT conversation.
It is a leadership conversation.
Final Thoughts
Every time a healthcare organization experiences a cyberattack, the rest of us have an opportunity to learn from it.
The Physicians Primary Care incident is another reminder that no medical practice is immune. Whether your organization has five employees or five hundred, protecting patient information requires ongoing attention, regular investment, and strong leadership.
If your practice has not completed a cybersecurity risk assessment recently, now is a good time to ask a simple question.
If an attacker got into our environment today, how confident are we that we would detect it, contain it, and continue caring for our patients?
Healthcare Cybersecurity Checklist
Before you close this page, ask yourself:
- Is multi factor authentication enabled for every employee?
- Has your HIPAA risk assessment been completed within the last year?
- Are your Microsoft 365 accounts monitored?
- Have you tested restoring your backups?
- Would you know if an attacker was inside your network today?
This article is based on publicly available reporting regarding the Physicians Primary Care of Southwest Florida cybersecurity incident. Source: Physicians Primary Care of Southwest Florida Agrees to Data Breach Settlement