Terry J. Dubrow’s Medical Practice Reports Breach Exposing Patient Data
Summary
Terry J. Dubrow’s medical practice says an unauthorized actor accessed its network starting January 16, 2025, and acquired patient data. The practice says it contained the incident and has no evidence of misuse or public disclosure.
Key points
- The practice says unauthorized network access began January 16, 2025, and that it learned on July 27, 2026, that patients’ information had been accessed and acquired.
- Potentially affected information includes names, patient-chart details, contact information, driver’s license or state ID numbers, Social Security numbers, and medical information.
- The practice says it engaged forensic experts, secured its systems, took steps to prevent further disclosure, and is implementing additional security measures.
- The practice reported the incident to the FBI and says it has no evidence that the information was misused or publicly disclosed.
- Affected individuals were offered 12 or 24 months of complimentary identity protection services; the notice also recommends reviewing accounts and credit reports.
Article Details
- Victim Organization
- Terry J. Dubrow, MD, A Medical Corporation
- Incident Type
- Unauthorized network access and acquisition of data
- Incident Date
- 2025-01-16
- Disclosure Date
- 2026-08-13
- Data Types Exposed
- Names
- Driver’s license or state ID numbers
- Phone numbers
- Mailing addresses
- Email addresses
- Social Security numbers
- Medical information, including dates of birth, prescription and treatment information, procedure images, and x-rays
- Operational Impact
- The Practice secured its systems, engaged forensic experts, and believes the incident has been contained. It reports no evidence that personal information has been misused or publicly disclosed.
- Ransom Or Extortion
- The Practice says an unauthorized actor contacted it and claimed to have gained access to some systems. No ransom demand or extortion activity is reported.
- Claim Status
- confirmed