.png)
Facial Surgery Group Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Facial Surgery Group data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Facial Surgery Group
Founded in 1994, Facial Surgery Group is an oral and maxillofacial surgery practice based in Kansas City. The group offers a range of services including dental implants, wisdom tooth removal, bone grafting, corrective jaw surgery, facial trauma care, TMJ treatment and oral pathology services.
What Happened?
On Nov. 24, 2025, Facial Surgery Group detected suspicious activity within its email environment.
The company disabled the affected email account, changed the password and engaged a third-party cybersecurity firm to investigate the incident. The investigation concluded on Feb. 2, 2026, and determined there was potential unauthorized access to certain information contained in an employee’s email account.
A third-party data mining vendor was then brought in to identify whose information and what types of data may have been involved. The review was completed on Sept. 9, 2026.
Facial Surgery Group began notifying affected individuals by first-class mail on Oct. 16, 2026. In total, 11,407 people in the United States were affected by this breach.
The types of consumer information that may have been exposed include:
Information Exposed:
- Names
- Dates of birth
- Social Security numbers
- Demographic information
- Financial account numbers
- Health information
You May Be Entitled to Compensation
If your information was exposed in the Facial Surgery Group data breach, you may be entitled to compensation for any harm or inconvenience suffered. Lawyers are ready to help affected individuals understand their rights and pursue claims related to this incident.
To find out if you are eligible to join a lawsuit, complete the below form. This is the first step to seeking compensation and holding companies accountable for failing to protect sensitive information.
.svg)