Austin Plastic & Reconstructive Data Breach
The 2025 Austin Plastic & Reconstructive Surgery data breach affected 4,266 people according to the HHS record.
Exposed Data Types
2 sensitive10- Medical information
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Financial account information
- Driver's license numbers
- Government issued IDs
- Passport numbers
- Social security numbers
About This Breach
Austin Plastic & Reconstructive Surgery is a healthcare practice in Austin, Texas that provides cosmetic and reconstructive surgery services.
How Did the Incident Occur?
According to the practice's notice, an unauthorized person accessed its network between June 30 and July 1, 2025. The incident was detected around July 1, and outside cybersecurity specialists were engaged to investigate. A detailed review of the affected files was completed on February 28, 2026.
What Information Was Affected?
The information varied by person. The disclosed scope includes names, addresses, dates of birth, financial-account information, driver's license or state identification numbers, passport numbers, and Social Security numbers. Medical information and health-insurance information may also have been involved.
How Did the Practice Respond?
The practice sent notices to affected people on March 11, 2026. It offered complimentary credit monitoring and identity-theft protection to people whose Social Security numbers were involved and said it had identified no misuse of the information as of the notice date.
What Should Affected People Do?
Notice recipients should enroll in the offered protection service and review credit reports, financial-account activity, health-insurance explanations of benefits, and medical records for transactions or services they do not recognize. They should contact the relevant financial institution, health insurer, or healthcare provider directly if they find a suspicious entry.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information