Facial Pain Center reports data breach, impacting sensitive consumer information

The Facial Pain Center (FPC), a healthcare services provider based out of Bloomington, Minnesota, specializing in the treatment of temporomandibular joint disorder (TMD) and Sleep Apnea, has reported a significant data breach to the U.S. Department of Health and Human Services Office for Civil Rights, revealing that an unauthorized party gained access to sensitive consumer information.

This breach, which occurred between January 11, 2024, and January 23, 2024, involved the compromise of employee email accounts, exposing numerous individuals’ names, demographic information, medical records, health insurance details, and dates of birth.

FPC first detected suspicious activity within several employee email accounts on January 23, 2024. In response, the company promptly secured the affected accounts and launched a thorough investigation with the assistance of third-party cybersecurity experts. The investigation confirmed that unauthorized access to these email accounts had occurred, potentially exposing sensitive consumer data.

Upon concluding the investigation, FPC notified the individuals whose information was compromised. These notification letters, sent following the formal breach notification filed on August 9, 2024, are expected to inform the affected individuals.

The Facial Pain Center operates eight locations around the Twin Cities, including in Blaine, Bloomington, Burnsville, Minnetonka, Roseville, Shakopee, St. Louis Park, and Woodbury. For those who received a data breach notification from FPC, it is crucial to understand the risks and take steps to protect personal information. Consulting with a data breach lawyer may be advisable to explore legal options and safeguard against the potential misuse of compromised data.