The stolen information included sensitive personal information, such as names and Social Security numbers, and nude photos of patients taken before and after surgery, several patients and court documents said.

The hack predates others affecting the Las Vegas valley over the past year, including a cyberattack on MGM Resorts, which resulted in an estimated $100 million loss to the company, and another on the Clark County School District, which resulted in the sharing of student files.

Many of the photos, which show breasts and other sensitive areas, contain patients’ faces. About a dozen women have since filed a lawsuit against the office, Hankins & Sohn Plastic Surgery Associates, claiming the office did not do enough to protect their private and personal information.

(via Messenger)

[Ya think? Hopefully their lawsuit against the clinic will get some justice, but the real target are the hackers. However, the lawsuit should raise another question: why did pictures of breast augmentations require the patients’ faces in them? Why weren’t they blurred out or cropped out? You can bet that plastic surgeons will start thinking about that if a jury awards significant damages in this case. — Ed]