HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 22, 2025.
- Organization as reported
- Chicago Cosmetic Surgery and Dermatology, IL
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Dec. 22, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9067, row:206)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Chicago Cosmetic Surgery and Dermatology, reported that its business associate (BA) experienced a hacking incident that affected the protected health information (PHI) of 770 individuals. The PHI involved demographic, healthcare provider, and health insurance information. The CE notified HHS and the affected individuals; the BA notified the media. In response to the breach, the CE took steps to mitigate harm and implemented additional technical and administrative safeguards.