Long Island Plastic Surgical Group, P.C. has agreed to establish a $2,600,000 settlement fund to resolve class action litigation related to unauthorized access to its computer systems on or about January 4, 2024.
Cybersecurity Incident and Litigation
The litigation relates to a cybersecurity incident involving unauthorized access to the computer systems of Long Island Plastic Surgical Group, P.C. on or about January 4, 2024. The systems affected by the incident contained sensitive personal information belonging to current and former patients of Long Island Plastic Surgical Group, P.C.
Long Island Plastic Surgical Group faced several class action lawsuits after the cybersecurity incident. The lawsuits were consolidated under the case title Baum et al. v. Long Island Plastic Surgical Group, P.C. According to the lawsuits, the plastic surgery practice failed to protect sensitive patient information stored on its systems from a cyberattack.
The affected systems contained the following types of personal information and protected health information (PHI) associated with patients of the practice: names, Social Security numbers, dates of birth, addresses, telephone numbers, driver’s license numbers, medical information, health insurance information, clinical photographs, financial account information, and payment card information.
Settlement Fund and Payment Structure
The settlement established a $2,600,000 fund to cover payments to settlement class members, costs associated with administering the settlement, fees and litigation expenses, and service awards for class representatives.
Individuals who submit valid claims may request reimbursement for documented monetary losses connected to the cybersecurity incident. Claimants who provide documentation demonstrating monetary losses associated with fraud or identity theft may request reimbursement of up to $5,000. Documented losses must be supported by third-party documentation such as invoices or receipts. Reimbursable expenses may include costs of credit repair services, credit monitoring, credit freezes, professional fees, and other expenses including travel and postage.
Class members may also choose an alternative payment option that does not require documented proof of loss. The payment amount will be calculated as a pro rata share of the remaining settlement fund after deducting attorneys’ fees, administrative costs, service awards, and other settlement benefits. Individuals whose clinical photographs were compromised in the cybersecurity incident may also claim an additional payment of up to $1,000.
Court Approval Process and Claim Deadline
The court granted preliminary approval of the settlement on January 29, 2026. A final approval hearing is scheduled for June 2, 2026.
Payments to settlement class members will begin only after the court grants final approval and any appeals are resolved. Individuals seeking compensation must submit a valid claim form by May 18, 2026.
The settlement agreement also requires Long Island Plastic Surgical Group, P.C. to implement enhanced data security procedures. The practice will fund those security improvements separately from the settlement fund established to compensate affected individuals.