Austin Plastic and Reconstructive Surgery Hit by Ransomware Attack, Exposing Patient Data Austin Plastic and Reconstructive Surgery, a medical practice in Austin, Texas, disclosed a data breach stemming from a ransomware attack that compromised sensitive patient information. The unauthorized access occurred between June 30 and July 1, 2025, though the breach was not discovered until February 28, 2026. Notifications to affected individuals began on March 11, 2026. The attack was claimed by the ransomware group ThreeAM, which posted its involvement on the dark web’s Tor network on August 10, 2025 weeks after the intrusion but months before the practice completed its investigation. Cybersecurity experts assisted in reviewing compromised files, determining that exposed data included personally identifiable information (PII) such as names, addresses, dates of birth, financial account details, government IDs, passport numbers, and Social Security numbers. In response, the practice is offering complimentary credit monitoring to individuals whose Social Security numbers were affected. A dedicated response line (833-877-7496) has been set up for inquiries, operating Monday through Friday from 8 a.m. to 8 p.m. Central Time. The incident underscores the persistent threat of ransomware targeting healthcare providers and the delayed detection of such breaches.