Long Island Plastic Surgical Group Settles $2.6M Class Action Over BlackCat Ransomware Attack In January 2024, Long Island Plastic Surgical Group (LIPG), a private academic plastic surgery practice based in Garden City, New York, fell victim to a ransomware attack by the BlackCat (ALPHV) group. Between January 4 and January 8, hackers infiltrated LIPG’s network, exfiltrated sensitive data, and deployed ransomware to encrypt files. The stolen data included personal and medical information of over 161,000 current and former patients, such as names, Social Security numbers, driver’s license details, biometric data, financial information, medical records, and patient photographs. The BlackCat group demanded a ransom to prevent the public release of the stolen data on its dark web leak site. LIPG opted to pay the ransom and received confirmation that the data had been deleted. However, the breach led to seven class action lawsuits, which were later consolidated into a single case. The plaintiffs alleged negligence, breach of contract, and violations of New York consumer protection laws, claiming harm from the exposure of their sensitive information. In October 2024, LIPG notified affected individuals by mail. The case was resolved in a $2.6 million settlement, with funds allocated for legal fees, administrative costs, and compensation for class members. Affected patients may claim up to $5,000 for documented losses or opt for a pro rata cash payment. Those whose clinical photographs were compromised may receive an additional payment of up to $1,000. The settlement deadlines for objections, exclusions, and claims are set for May 2026, with final approval scheduled for June 2, 2026. The incident underscores the persistent threat of ransomware in healthcare, where attackers target sensitive patient data for financial gain. It also highlights the legal and financial repercussions of data breaches, as well as the importance of robust cybersecurity measures, workforce training, and compliance with HIPAA regulations to mitigate risks.