Neinstein Plastic Surgery Data Breach Exposes Sensitive Patient Information Neinstein Plastic Surgery PLLC, a New York City-based plastic surgery practice, disclosed a data breach involving unauthorized access to a company email account. The incident exposed sensitive personal and medical information of patients, prospective patients, and other individuals associated with the practice. The breach was first detected on December 2, 2025, after an unauthorized third party accessed the email account between November 12 and November 20, 2025. An investigation revealed that files within the compromised account contained exposed data, including names, dates of birth, contact details, driver’s license or passport numbers, health insurance information, clinical records, financial account details, and Social Security numbers. Notification letters were sent to affected individuals on April 6, 2026, with the Massachusetts Office of Consumer Affairs and Business Regulation also informed. While the total number of impacted individuals remains undisclosed, 21 Massachusetts residents were confirmed as affected. In response, Neinstein Plastic Surgery is offering one year of complimentary identity protection services through Experian IdentityWorks, including credit monitoring, identity restoration, and $1 million in identity theft insurance. Affected individuals must enroll by June 30, 2026, using an activation code provided in their notification letter. A dedicated helpline (1-833-918-4089) has been established for inquiries.