Crystal Coast Pain Management Data Breach: SSNs Exposed

Crystal Coast Pain Management, a North Carolina medical group practice specializing in pain medicine for acute and chronic pain conditions, disclosed a data breach that may have exposed sensitive patient information.

The practice is a division of East Carolina Anesthesia Associates PLLC, commonly known as ECAA. The company posted a notice on its website informing patients about the incident.

Crystal Coast Pain Management detected a network security incident on or about Jan. 11, 2026, in which an unauthorized third party gained access to its network environment. Upon discovering the intrusion, the company engaged third-party forensic specialists to assist with securing the network and investigating the full scope of any unauthorized activity.

The forensic investigation, which was conducted on April 20, 2026, found that the unauthorized third party had acquired certain personal information belonging to individuals during the incident, according to the notice.

Following the investigation, Crystal Coast Pain Management began an in-depth review process to determine which specific individuals were affected. The review process was completed on June 24, 2026.

On Feb. 4, 2026, a ransomware group calling itself DEVMAN 2.0 posted a claim on the dark web, asserting it had obtained 300 gigabytes of the organization's internal data and intended to publish it. According to the dark web posting, the stolen information included Social Security numbers, medical data and medical cards.

The confirmed types of personal information that may have been exposed in the breach include first and last names, dates of birth, Social Security numbers and medical information.

Crystal Coast Pain Management's response to the breach

Crystal Coast Pain Management is offering affected individuals credit monitoring services at no charge. The services include single bureau credit monitoring, a single bureau credit report and a single bureau credit score.

The company is directly notifying all individuals whose data may have been affected and providing them with information about these protective resources. To assist those with questions or concerns, Crystal Coast Pain Management set up dedicated phone support. Representatives could be reached by calling 1-800-877-7368 or 1-844-597-7855, Monday through Friday, excluding major U.S. holidays.