La Perouse LLC, a medical billing and coding management company, experienced a major cyberattack. A ransomware group known as Everest claimed responsibility for the data breach and posted about the attack on the dark web on Aug. 8, 2025. The breach compromised both personally identifiable information (PII) and protected health information (PHI).
The cybercriminals asserted they had stolen a large amount of sensitive data, including billing records, personal information, internal documents and other confidential information. La Perouse disclosed the cybersecurity incident to the U.S. Department of Health and Human Services on Sept. 2, 2025, reported has a hacking incident.
The total number of affected individuals has not been released, but is believed to include several thousand patients from multiple medical practices. Exposed information may include names, addresses, dates of birth, Social Security numbers, driver's license numbers, medical records, health insurance information and payment information.
Ransomware attacks often put affected individuals at risk of identity theft, financial fraud and potential exposure of private health details.
The company has not made a public announcement about the data breach. However, the notification of the HHS indicates that the organization is conducting an investigation to identify affected individuals. In addition to required state and federal disclosures, medical practices and patients affected by the data breach will be notified by mail.
If you believe your personal information may have been compromised in this breach:
For more information about the company, visit the La Perouse LLC official website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.