West Texas Oral Facial Surgery Data Breach Lawsuit Investigation
Were you recently notified that your personal or medical details were caught in the West Texas Oral Facial Surgery ransomware attack? Time is limited to safeguard your identity and explore possible compensation. Read on to learn exactly what happened, which data was exposed, and the immediate steps you can take.
What Happened?
On May 29, 2025, West Texas Oral Facial Surgery (WTOFS) experienced a network disruption traced to the ransomware gang INC RANSOM. The attackers infiltrated the practice’s servers, copied sensitive patient files and later boasted about the hack on the dark web on June 18, 2025.
Following a forensic investigation, WTOFS confirmed that an unauthorized party accessed and exfiltrated protected health information. The breach was formally reported to:
- U.S. Department of Health & Human Services on Aug 2, 2025 (11,151 affected)
- Texas Attorney General’s office on Aug 4, 2025 (9,887 affected Texas residents)
What Information Was Exposed?
The investigation indicates that one or more of the following data points may have been compromised for each individual:
- Full name
- Social Security number
- Date of birth
- Mailing address and other government-issued ID data
- Medical information, including imaging files and treatment details
- Financial information (for a limited subset of patients)
Note: Not every data element was exposed for every patient.
Download Official Breach Notice (PDF)
How Is West Texas Oral Facial Surgery Responding?
The practice has mailed written notifications to all identified victims and set up a dedicated hotline to answer questions: 1-833-397-4916 (Mon–Fri, 7 a.m.–7 p.m. CT). WTOFS states it has fortified its network, retained cybersecurity specialists, and is monitoring for evidence of identity misuse.
Protect Yourself Today
Data stolen in health-care breaches is highly valuable on underground markets. Take these steps immediately:
- Review Explanation of Benefits (EOB) and medical bills for unfamiliar charges.
- Place a free fraud alert or security freeze with Equifax, Experian and TransUnion.
- Monitor credit reports and bank statements for at least 24 months.
- Consider ID-theft monitoring services that track dark-web activity.
- Report suspected fraud to the Federal Trade Commission (IdentityTheft.gov) and law enforcement.
Can You File a Claim?
Victims may be entitled to compensation for:
- Out-of-pocket expenses (credit freezes, monitoring, medical bills)
- Time spent remediating fraud or enhancing security
- Pain, suffering, or anxiety resulting from the breach
- Future identity-theft risk
Class-action investigations are underway. If you received a breach letter—or believe your records were involved—consult an experienced data-privacy attorney to review your rights.
Frequently Asked Questions
How many people were affected by the West Texas Oral Facial Surgery data breach?
Filings with federal and state regulators show at least 11,151 individuals nationwide, including 9,887 Texas residents.
Was my Social Security number exposed in the West Texas Oral Facial Surgery breach?
Some, but not all, patients had Social Security numbers accessed. Review your notification letter to confirm which data elements pertain to you.
Is West Texas Oral Facial Surgery offering free credit monitoring?
The company’s notice does not reference complimentary credit monitoring, but it recommends that patients stay vigilant and use the hotline for assistance.
Who is INC RANSOM and why is that significant?
INC RANSOM is a cyber-criminal group notorious for targeting health-care providers, exfiltrating data, and demanding payment to prevent public leaks.
What is the deadline to join a West Texas Oral Facial Surgery lawsuit?
Deadlines vary by jurisdiction and the specific claims filed. Contact a data breach attorney promptly to preserve your rights.
Will my medical treatment records be published online?
While sensitive files were copied, no public posting has been confirmed. However, ransomware groups sometimes publish data if ransoms go unpaid.
Does this breach violate HIPAA?
The unauthorized disclosure of protected health information triggers HIPAA’s breach-notification rule and potential civil penalties.
Where can I get more information about the West Texas Oral Facial Surgery incident?
Consult the official PDF notice linked above or call the hotline at 1-833-397-4916.
Take Action Now
If you believe your information was involved, act quickly. Monitor your accounts, secure your credit file, and explore your legal options to hold negligent parties accountable.