Marc Everett Plastic Surgery Data Breach Exposes Medical Records

On February 5, 2025, Marc Everett, M.D. P.C., a New York City plastic surgery practice, discovered suspicious activity involving its third-party practice management platform. After promptly notifying the vendor, an internal forensic investigation by the third party confirmed on February 10, 2025, that unauthorized access had occurred and some personal information belonging to Marc Everett, M.D. P.C. patients was compromised.

A total of 681 individuals in the United States were affected by this incident, with one individual each in Maine and Massachusetts impacted. The information exposed included both personally identifiable information (PII) and protected health information (PHI): demographic information, social security number, medical records, and health insurance information.

The breach was reported to the Maine Attorney General’s office on April 10, 2025, and to the Massachusetts Attorney General’s office on April 25, 2025. You can read the official disclosure on the Maine Attorney General’s website and the Massachusetts Attorney General’s website. Notification letters were sent to affected individuals beginning April 1, 2025, by written mail.

Marc Everett, M.D. P.C's response

Upon confirmation of the breach, Marc Everett, M.D. P.C. took immediate steps to notify all impacted individuals and consulted with data breach attorneys for guidance. While the breach occurred at the third-party vendor, the practice reviewed its own network security and coordinated with the vendor to ensure that additional security measures were implemented.

For those affected, the company is offering 24 months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company. Instructions for enrolling in these services were included in the written notification sent to each affected individual. The deadline to enroll in the free credit monitoring is July 3, 2025.

If you received a notification, it is important to:

• Remain vigilant for signs of identity theft or fraud.
• Review your account statements and monitor your credit reports for suspicious activity.
• Consider placing a fraud alert or credit freeze with the major credit bureaus.
• Take advantage of the complimentary credit monitoring and identity theft restoration services provided.

Further guidance, including contact information for the credit bureaus and the Federal Trade Commission, was provided in the notification letter. If you have questions or need assistance, you can call the dedicated response line at 833-998-8790, Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern Time.

For more information about the practice, visit the Me Plastic Surgery website.