HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumActive
Aesthetic Plastic Surgery Center
bd_4bfc1fefc74d7719 · schema v1 · pii pii-v1
Full breach record for Aesthetic Plastic Surgery Center →Aesthetic Plastic Surgery, PC (dba NYBRA Plastic Surgery) disclosed that an unauthorized actor accessed its network between August 28 and September 4, 2023. The incident potentially exposed patient names, addresses, DOBs, driver's license info, SSNs, and medical/insurance data. NYBRA notified law enforcement and regulators, and is offering credit monitoring. Investigation was ongoing as of the December 21, 2023 notice.
Vermont clock✗ VT AG >45 bday15 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-21-aesthetic-plastic-surgery-dba-nybra-plastic-surgery-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2023
- Raw hash
- a9f20cf998fdc405088a3a434a8839c2912582f4a766a10b8396f16be551a9f8
Reporting entity
- Name
- Aesthetic Plastic Surgery Centernorm: aesthetic plastic surgery center
- Domain
- aestheticps.com
Victim entity
- Name
- Aesthetic Plastic Surgery Centernorm: aesthetic plastic surgery center
- Domain
- aestheticps.com
Incident
- Discovered
- Sep 4, 2023
- Materiality determined
- Dec 21, 2023
- Notification sent
- Dec 21, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- notified relevant regulators
Compliance
- Time to disclose
- 15 weeks(108 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.