Strauss Borrelli PLLC, a leading data breach law firm, is investigating Hillcrest Plastic Surgery regarding its recent data breach. The Hillcrest Plastic Surgery data breach involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT HILLCREST PLASTIC SURGERY:
Hillcrest Plastic Surgery is a cosmetic surgery and medical spa treatment center based in Florida. Today, Hillcrest Plastic Surgery offers a variety of cosmetic surgery procedures, including body contouring, breast surgery, eyes and brow surgery, facial surgery and rejuvenation, lip enhancement, and skin care.2 Additionally, Hillcrest Plastic Surgery provides non-surgical skin care solutions through its suite of medical spa services.2 Headquartered in Orlando, Florida, Hillcrest Plastic Surgery operates out of one location.
WHAT HAPPENED?
Recently, Hillcrest Plastic Surgery announced that the sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on February 26, 2025, Hillcrest Plastic Surgery and its management company, DermCare Management, became aware of suspicious activity related to its computer systems.1 As a result, Hillcrest Plastic Surgery launched an investigation to determine the nature of the incident.
Through its investigation, on March 3, 2025, Hillcrest Plastic Surgery confirmed that sensitive personal information belonging to patients may have been accessed and copied by an unauthorized third party during the breach. As a result, Hillcrest Plastic Surgery began a review of the data to determine what information had been impacted, as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Driver’s license number
- Financial account information
- Medical information
- Health insurance information
As a result of the data breach, Hillcrest Plastic Surgery posted a notice of the incident on its website. Additionally, Hillcrest Plastic Surgery is planning to send breach notification letters to impacted individuals. Based on the website breach notice, Hillcrest Plastic Surgery is providing affected individuals with a list of the specific types of sensitive information impacted. A link to the form breach notification that Hillcrest Plastic Surgery posted to its website is below.
If you received a breach notification letter from Hillcrest Plastic Surgery:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
