Another plastic surgery practice fell prey to a cyberattack with extortion attempt

The article reports that a fourth plastic surgery practice was struck by a cyberattack last year, with the same threat actors who previously hit other clinics. Dozens of patients at Dr. Richard Swift’s Upper East Side office had hacked nude images and personal data posted online, and the suit notes the doctor failed to notify clients or authorities.

The attackers allegedly used a Russian-hosted website to publish information about at least 22 patients, and they contacted patients directly offering to remove the material if paid. The leak sites have been difficult to remove because the host does not cooperate with U.S. law enforcement, and according to The New York Post, the leak site is currently offline, though it is unknown whether an extortion payment was made.

The report identifies the attackers as the same individuals previously linked to Gary Motykie, M.D., Hankins & Sohn Plastic Surgery Associate, and the second attack on Jaime Schwartz, M.D., who reportedly published patient photos and data and sought payment to remove them.