Consumer ProtectionData BreachDeceptive Trade Practice

Data Breach Investigation of Leaked Jefferson Surgical Clinic Patient Information

Migliaccio & Rathod LLP is currently investigating the Roanoke-based Jefferson Surgical Clinic for failing to safeguard sensitive patient information in a data breach that occurred in June of 2021. The data breach was caused by unauthorized access to the surgical center’s network that allowed hackers to access the personal information of past and present patients. Examples of the types of data exposed in the leak include names, dates of birth, social security numbers, addresses, lab results, medical procedures, diagnoses, medications, health insurance information, and dates of services.

Some of the Jefferson Surgical Clinic locations affected by the data breach include:

• Jefferson Surgical Clinic Main Office—Roanoke
• Jefferson Surgical Clinic Tanglewood Office—Roanoke
• Jefferson Surgical Clinic Plastic Surgery Office—Salem
• Jefferson Surgical Clinic NeoPulse Laser Therapy—Roanoke
• Jefferson Surgical Clinic Interventional Center—Roanoke

When hackers target outpatient surgery centers, these criminals can steal and sell patient information such as social security numbers, financial information, and other identifying data. In previous data breaches, for example, victims of data theft have had to spend money out of pocket for credit monitoring or fraudulent charges to bank and hospital accounts. Some individuals affected by the breach may have noticed one or more of the following types of fraudulent activity: suspicious credit card charges, requests for services or loans in a patient’s name, medical procedures ordered without patient consent, and/or disrupted medical care.

Are you or have you been a Jefferson Surgical Clinic patient who has received a data breach notification letter in the past year?

If so, we would like to hear from you. Please complete the questionnaire below, send us an email at, or give us a call at (202) 470-3520.

The lawyers at Migliaccio & Rathod LLP have years of experience in class action litigation against large corporations, including in cases involving data breaches. More information about our current cases and investigations is available on our blog.