Dr. Terry Dubrow, the plastic surgeon known for his role on the reality series "Botched," has disclosed that his medical practice fell victim to a cyberattack that compromised sensitive patient information.
The breach, which began in January 2025 according to a notice filed with the California Attorney General, resulted in unauthorized access to a range of confidential patient data. Dubrow's practice confirmed the theft last month and began notifying affected patients on Thursday.
"Cybercriminals have become so sophisticated with A.I. and other technology that literally no business, big or small, is safe," Dubrow told TMZ.com. The physician emphasized that he had invested substantial financial resources into protecting patient data and stated that no evidence currently suggests the stolen information has been misused or distributed.
The compromised data varies by patient but may include Social Security numbers, driver's license numbers, residential addresses, birth dates, prescription records, and treatment information. In some cases, procedure photographs and X-ray images were also accessed during the breach.
Dubrow's practice has taken steps to address the security incident and support affected patients. The practice maintains a $1 million cyber protection insurance policy and has established a complimentary monitoring service for patients moving forward. Those impacted by the breach are being offered free identity protection services.
The practice confirmed that the breach has been contained and reported the incident to the FBI. Federal authorities are now involved in the investigation of the cyberattack.
The incident highlights the growing vulnerability of medical practices to sophisticated cyberattacks, even when significant security measures are in place. Healthcare providers maintain particularly sensitive personal information, making them attractive targets for cybercriminals seeking data that can be exploited for identity theft or sold on underground markets.