Long Island Plastic Surgical Group $2.6M Data Breach Settlement

Current and former patients of Long Island Plastic Surgical Group P.C. whose personal information the January 2024 cybersecurity incident exposed may qualify to submit a claim for up to $6,000 from a class action settlement. The breach impacted an estimated 161,000 individuals.

Long Island Plastic Surgical Group agreed to pay $2.6 million to settle a class action lawsuit alleging it failed to adequately protect patient data, resulting in a data breach in early January 2024. The incident compromised current and former patients' information, which may have included names, Social Security numbers, birth dates, addresses, phone numbers, driver’s license numbers, medical and health insurance details, clinical photographs, financial account numbers and payment card information.

Who can file a claim for a data breach payout?

Class members are individuals in the United States whose personal information the Long Island Plastic Surgical Group cybersecurity incident compromised in early January 2024.

How much will settlement payments be?

Class members have the following benefit options:

• Reimbursement of documented monetary losses: Class members can claim up to $5,000 for out-of-pocket expenses directly linked to the data breach. Eligible expenses may include unreimbursed fraud losses; professional fees, such as for attorneys or accountants; credit monitoring costs; and other related expenses like postage, notary fees or costs associated with freezing or unfreezing credit.
• Alternative pro rata cash payment: Class members who do not submit a documented losses claim can submit a claim to receive an alternative a pro rata cash payment from the remaining net settlement fund after the settlement administration paid all other claims. The administrator will determine the final payment amount by the total number of claims filed.
• Additional cash payment for clinical photographs: Class members who had their clinical photographs compromised in the data breach can submit a claim to receive an additional cash payment of up to $1,000. The settlement administrator will determine the final payment amount by the total number of claims filed.

How to claim a class action rebate

To receive a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: Long Island Cybersecurity Incident Settlement Administrator, Attn: Claims, P.O. Box 6810, Portland, OR 97228-6810

The claim deadline is May 18, 2026.

Required proof and claim information

• All claimants must provide the unique ID and PIN from the settlement notice they received.
• Those filing a documented losses claim must provide supporting documentation, which may include receipts for services, credit card or bank statements showing unreimbursed fees or fraudulent charges, police reports and any other proof of fraud or identity theft.

Payout options

• Digital payment
• Paper check mailed to the address provided

$2.6 million settlement fund breakdown

The settlement fund of $2,600,000 will include:

• Settlement administration costs: To be determined
• Attorneys’ fees: Up to $910,000
• Attorneys’ expenses: To be presented to the court for approval at a later date
• Service awards to class representatives: Up to $3,500 each
• Payments to approved claimants: Remaining settlement funds

Important dates

• Deadline to opt out: May 4, 2026
• Deadline to file a claim: May 18, 2026
• Final approval hearing: June 2, 2026

When is the Long Island Plastic Surgical Group data breach settlement payout date?

The settlement administrator will issue payments to approved claimants after it completes claim processing and the court grants final approval of the settlement.

Why is there a class action settlement?

The class action lawsuit alleged Long Island Plastic Surgical Group PC failed to adequately protect patient personal information, resulting in a cybersecurity incident in January 2024. The plaintiffs claimed the breach led to the exposure of sensitive data and caused financial and other harm.

The company denies the allegations but agreed to settle to avoid the uncertainty and costs of ongoing litigation.

Sources

1. Settlement notice
2. Settlement website
3. Claim form