Plastic Surgery Patient Sues Practice Over Hacked Data, Photos

Long Island Plastic Surgical Group PC’s lack of basic cybersecurity protections led to a cyberattack exposing more than 160,000 people’s personal information, a proposed class action said—including patients’ clinical photographs and other medical information.

The plastic surgery provider, which does business as New York Plastic Surgical Group, didn’t follow industry standards to protect its employees’ and patients’ private information such as encrypting data, using strong passwords, or educating employees on cybersecurity, according to a complaint filed Friday in the US District Court for the Eastern District of New York.

The medical provider’s website describes it as one of “the most ...