Terry J. Dubrow, MD Data Breach: SSNs and Images Compromised

Terry J. Dubrow, MD, A Medical Corp., a cosmetic and reconstructive plastic surgery practice in Newport Beach, California, has disclosed a data breach involving unauthorized access to patient records.

The practice, which has been in operation since 1995 and also offers non-surgical aesthetic treatments, serves patients in the Orange County area. The total number of individuals affected has not been publicly reported.

The company filed a disclosure with the California Attorney General on Aug. 13, 2026, and notified impacted individuals on the same date.

On July 27, 2026, an unauthorized actor contacted the Practice and claimed to have gained access to some of the systems in its digital environment. Upon learning of the claim, the Practice took steps to secure its systems and brought in forensic experts to investigate.

The forensic investigation determined that an unauthorized actor first accessed a portion of the Practice's network on Jan. 16, 2025. During that unauthorized access, the actor acquired certain data that the Practice maintained.

On July 27, 2026, the Practice confirmed that patients' personal information was among the data that had been taken.

The exposed data came from patient charts that had been provided by patients or their referring physicians.

The personally identifiable information included names, driver's license or state ID numbers, phone numbers, mailing addresses, email addresses, Social Security numbers and dates of birth. The protected health information included prescription information, treatment information, procedure images and x-rays.

Terry J. Dubrow, MD's response to the breach

The Practice is offering affected individuals complimentary identity protection services through IDX. These services are designed to help detect possible misuse of personal information and provide identity protection support.

Affected individuals can enroll in the IDX services by visiting the IDX enrollment page or by calling 1-888-201-6003. Each person's notification letter includes a unique enrollment code required to sign up. The deadline to enroll is Nov. 13, 2026.

The phone line is available Monday through Friday from 6 a.m. to 6 p.m. Pacific Time, excluding holidays.