Skip to content
Back to Blog
high severity July 08, 2023 · 4 min read Unverified claim — what this is

Beverly Hills Plastic Surgery Listed by alphv Ransomware Group

If you are a patient of Beverly Hills Plastic Surgery, here’s what is being claimed, and what it would mean for you.

Breast augmentation, rhinoplasty, and liposuction are some of the most sought-after cosmetic surgery procedures at Beverly Hills Plastic Surgery. Dr. David Kim and Dr. Eugene Kim have developed an impeccable reputation for their stunning, natural-looking results and high patient satisfaction. They pride themselves on providing honest advice and the highest standard of care, from your initial plastic surgery consultation to your post-operative appointments. Our plastic surgeons have been serving the Los Angeles and Beverly Hills area for many years and take great pride in the work they do. Bot

— from Alphv’s own leak-site posting. This is the group’s claim, quoted verbatim; it is not GalaxyWarden’s reporting and has not been independently verified.
Beverly Hills Plastic Surgery Listed by alphv Ransomware Group

Beverly Hills Plastic Surgery was listed on the Alphv ransomware leak site on July 08, 2023. The California clinic, known for breast augmentation, rhinoplasty, and liposuction procedures, is claimed to have had internal files exfiltrated during a ransomware attack. Patients who visited the practice for consultations, surgeries, or follow-up care may have their personal information now at risk of public release.

Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 582 companies.
See what is exposed about you — free scan →
Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.

Details from the Leak Site

The Alphv leak site listing states that internal files were exfiltrated from Beverly Hills Plastic Surgery in a ransomware incident. The disclosure does not quantify how many patients or employees are affected, nor does it specify the exact types of records taken. It simply confirms data was allegedly stolen and provides a deadline for payment before further publication. Public reporting on Alphv indicates the group follows a double-extortion model: they encrypt systems and threaten to publish stolen data if the ransom is not paid.

July 08, 2023 marks the date the clinic appeared on the leak portal. The listing remains active, meaning the threat of data publication continues.

Why This Matters for You and Your Family

If you or a family member received treatment at Beverly Hills Plastic Surgery, your medical history, contact details, and possibly financial information could be exposed. Cosmetic procedure records often include photographs, pre- and post-operative notes, addresses, phone numbers, email addresses, and payment information. Even when the leak site does not detail what was taken, experience with similar incidents shows patient files frequently contain enough data to enable identity theft or targeted fraud.

Medical data carries long-term sensitivity. Unlike a credit card number that can be replaced, details about cosmetic surgeries can be used for blackmail, social engineering, or discrimination in employment and insurance contexts. Your family members listed as emergency contacts or co-payers are also placed at risk.

Doxxing and Identity-Chain Risks

Stolen patient records rarely stay isolated. Attackers and subsequent data buyers combine names, emails, and phone numbers with information from other breaches to build detailed profiles. A seemingly harmless cosmetic surgery note can link to your social media accounts, workplace, or children’s information. These identity chains accelerate doxxing campaigns, account takeovers, and spear-phishing attacks that feel personal because they reference real medical history.

Credential leaks from healthcare providers frequently cascade into gaming platforms. Children’s accounts tied to a parent’s email or phone number become easy targets once the parent’s data appears on a leak site. What begins as a clinic breach can lead to compromised Roblox, Fortnite, or Discord accounts within weeks.

Alphv’s Known Track Record

Public reporting attributes Alphv, also known as BlackCat, with emerging in late 2021. The group has targeted hospitals, law firms, manufacturing companies, and private medical practices. Notable prior victims include large healthcare networks and technology service providers. Their typical playbook involves initial access through phishing or exploited remote desktop credentials, followed by rapid data exfiltration before deploying ransomware. Alphv publicly pressures victims by posting samples of stolen data and counting down to full publication if payment is not received.

What to do

  • Run a DoxxScan to map every link between your email, phone number, usernames, and real identity so you can see exactly what this claimed breach connects to.
  • Rotate any password you used at Beverly Hills Plastic Surgery or any related patient portal anywhere it is reused, and switch to 2FA through an authenticator app instead of text messages.
  • Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught and addressed in hours rather than months.
  • Cover your entire household with DoxxScan family protection that includes dependents and children’s gaming accounts which often chain back to the same addresses and emails.
  • Let DoxxScan remediation specialists manage takedown requests and broker removals for you while you focus on securing accounts.

The incident underscores how even specialized medical practices remain prime targets for financially motivated ransomware operators. Acting quickly on the personal exposure created by this claimed breach can limit how far the stolen data travels. Start your DoxxScan trial and use its continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage to protect yourself and your family from both this leak and the ones that will inevitably follow.

What the free scan actually returns

Sample resultyou@email.comIllustrative — not a real person

Found on people-search siteswe remove these

These listings are live, public, and legal to remove — and removing them is what we do.

value redacted in this sampleage, relatives, address historySpokeo
value redacted in this samplephone, household, property recordsBeenVerified
value redacted in this sample582 companies checked

Found in breach recordsverifiedreported — unverified

Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.

verifiedvalue redacted in this samplepassword + phone · 2024telecom breach
unverifiedvalue redacted in this sampleclaimed in ransomware listing · 2026leak-site claim

Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.

Check your exposure
Beverly Hills Plastic Surgery is one listing. Your email is probably in others.
We can’t confirm any single incident against the sources we search, so we won’t pretend to. What we can show you is your own exposure — your email against 13.1B+ leaked records and the sites that publish your address. About 15 seconds. No account, no card.

By running your scan you agree to the Terms and Conditions and the Privacy Policy, and to GalaxyWarden emailing you the results of this scan.

Report details & sourcing

Severity High
Disclosed July 08, 2023
Last reviewed August 8, 2026
Affected Unconfirmed
Unverified claim — what this report is
This page documents a public listing on a ransomware/extortion group’s leak site, tracked via public threat-intelligence sources. A listing is the attacker’s claim. GalaxyWarden aggregates and reports such claims; we have not independently verified that a breach occurred, what data (if any) was taken, or the accuracy of anything the group asserts, and the named organisation has not necessarily confirmed the incident. Sections above describe what the listing shows and the group’s documented history — not verified findings about the named organisation. If you represent this organisation and believe anything here is inaccurate, tell us and we’ll review it promptly.
Editorial & sourcing policy
GalaxyWarden is a breach-monitoring service and news aggregator. We do not exfiltrate, host, purchase, or redistribute stolen data. Breach information is compiled from publicly accessible sources and threat-intelligence platforms, and is reported as claims attributed to their source. We promptly correct or remove material shown to be inaccurate — see our content & takedown policy or write to support@galaxywarden.com.
Share this Post on X Reddit Email