Chicago Cosmetic Surgery and Dermatology Investigated Following December 2025 Data Breach Chicago Cosmetic Surgery and Dermatology, a private medical practice in Chicago’s River North neighborhood, reported a data breach to the U.S. Department of Health and Human Services (HHS) on December 22, 2025. The incident, classified as a hacking or IT-related breach, has prompted an investigation by class action law firm Shamis & Gentile P.A., which specializes in data breach litigation. The practice, which employs between 51 and 200 staff and provides dermatology, cosmetic surgery, and aesthetic treatments, has not publicly disclosed the number of affected individuals or the specific types of compromised data. However, such breaches typically involve exposure of sensitive personally identifiable information (PII), potentially increasing risks of identity theft and fraud. While the company has not issued a public notice about the incident, affected individuals may have legal recourse under data breach laws. The investigation seeks to determine eligibility for compensation related to damages such as identity theft, financial losses, or emotional distress. No further details on the breach’s scope or response efforts have been released.