Neinstein Plastic Surgery, a New York City-based practice, reported a data breach that occurred between November 12 and November 20, 2025. This incident involved unauthorized access to an email account. The company sent notification letters to affected individuals starting on April 6, 2026.
The types of data exposed in this breach include names, dates of birth, contact information, driver's license or passport numbers, health insurance information, clinical information such as medical diagnoses and treatment details, credit card or financial account information, and Social Security numbers. While the total number of individuals affected has not been disclosed, at least 21 Massachusetts residents received notifications. The company has not publicly confirmed the total number of affected individuals or other states impacted beyond Massachusetts and New York, where the practice is based.
Details about data breaches can emerge over time, and notification processes may be ongoing.