Hand & Plastic Surgery Centre Data Breach Exposes PII & PHI

On January 29, 2025, Hand & Plastic Surgery Centre, PLC ("H&P"), a medical practice located in Grand Rapids, Michigan, experienced a significant data breach involving unauthorized access to its computer network. The breach potentially exposed sensitive personal and medical information of approximately 19,846 individuals across the United States, including one individual residing in Massachusetts.

Upon discovering the unauthorized intrusion, H&P secured its network environment and engaged independent IT security and forensic specialists to investigate the incident thoroughly. The forensic investigation revealed that an unauthorized third party successfully infiltrated the company's systems, potentially exposing personally identifiable information (PII) and protected health information (PHI).

It was disclosed that the compromised data included individuals' names, dates of birth, Social Security numbers, health insurance information, and medical records.

As of April 1, 2025, H&P has not received any reports of identity theft or misuse of the exposed information related to this breach. Nevertheless, given the sensitive nature of the data involved, individuals whose information was potentially compromised are encouraged to remain vigilant against possible identity theft or fraud.

Hand & Plastic Surgery Centre, PLC's response

Following the breach, Hand & Plastic Surgery Centre, PLC took immediate steps to secure its systems and prevent further unauthorized access. The company also notified regulatory authorities, including reporting the incident to the Massachusetts Attorney General's office on March 11, 2025, and to the U.S. Department of Health and Human Services on March 7, 2025.

To support affected individuals, H&P mailed notification letters detailing the incident and provided resources to help protect their personal information. Additionally, the company is offering complimentary credit monitoring and identity theft protection services through Cyberscout, a TransUnion company specializing in fraud assistance and remediation services. Affected individuals are strongly encouraged to enroll in these free services to help safeguard their personal and financial information.

H&P has also implemented additional security measures and enhanced safeguards to strengthen the privacy and security of information stored in its systems. The company reviewed and improved its internal policies and procedures related to data security and information lifecycle management.

Individuals affected by this breach should carefully monitor their financial account statements and regularly review their credit reports for suspicious activity. If fraudulent activity or identity theft is suspected, individuals should promptly notify their financial institutions, local law enforcement, and their state's attorney general. For additional guidance on protecting against identity theft, affected individuals can visit the Federal Trade Commission's identity theft website at identitytheft.gov or call 1-877-ID-THEFT (1-877-438-4338).

For assistance in enrolling in credit monitoring services or for further questions about this incident, individuals can contact H&P's dedicated support line at 1-855-577-8730, available Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time, excluding holidays. Additional information is also available on H&P's official website.

The full notice of the data breach can be accessed through the Massachusetts Attorney General's website and the U.S. Department of Health and Human Services' website. Additionally, the company's official disclosure is posted on the Trinity Health Michigan website.

About Hand & Plastic Surgery Centre, PLC

Hand & Plastic Surgery Centre, PLC, also known as Elite Plastic Surgery, is a specialized medical practice based in Grand Rapids, Michigan. The practice provides a variety of surgical and non-surgical treatments, including hand surgery, plastic surgery, reconstructive surgery, Botox, and injectable fillers.

The practice is located at 245 Cherry St SE, Suite 302, Grand Rapids, MI 49503, and employs approximately nine staff members according to LinkedIn. For more information, visit their official website at Trinity Health Michigan.