GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC disclosed a data security incident to the Illinois Attorney General on October 6, 2025, triggering legally mandated notification letters. If you are one of the people who received GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC 's letter, your data may have been exposed and you could be entitled to compensation.
The Illinois Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the Illinois AG show that GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Greater St. Louis Oral & Maxillofacial Surgery PC operates as a specialized surgical healthcare provider, delivering complex dental and facial reconstruction procedures, corrective jaw surgeries, and advanced oral pathology treatments to patients across the region. Because surgical practices manage comprehensive patient care cycles from initial consultation through post-operative recovery, they accumulate an immense volume of highly sensitive documentation. This includes detailed electronic health records (EHRs), surgical planning files, diagnostic imaging, payment and insurance verification details, and core demographic information such as Social Security numbers and dates of birth. The confidential nature of this repository makes healthcare providers primary targets for malicious actors seeking to exploit high-value personal data.
In 2025, Greater St. Louis Oral & Maxillofacial Surgery PC formally reported a significant data security incident to the Illinois Attorney General. While the precise vectors of such attacks typically involve sophisticated ransomware deployments, unauthorized intrusions into digital databases, or vulnerabilities within third-party administrative vendor systems, incidents of this scale point to a systemic breakdown in perimeter and network security. Healthcare institutions maintain interconnected digital ecosystems that link patient scheduling, clinical charting, and billing gateways, creating multiple potential entry points for cybercriminals intent on exfiltrating confidential files.
The data compromised during this breach typically encompasses a dangerous combination of Protected Health Information (PHI) and Personally Identifiable Information (PII). When records containing names, Social Security numbers, medical history, diagnosis notes, and insurance billing details are exposed, victims face severe, long-term risks. Unlike standard credit card compromises that can be resolved by replacing a card, stolen medical and identity data cannot be easily altered. Exposed PHI and PII create immediate pathways for medical identity theft—where unauthorized parties fraudulently obtain treatments using a victim's insurance—as well as ongoing threats of financial fraud, tax return tampering, and targeted phishing scams that exploit the victim's underlying medical conditions.
As a covered entity managing sensitive medical records, Greater St. Louis Oral & Maxillofacial Surgery PC was bound by strict legal and regulatory frameworks, most notably the Health Insurance Portability and Accountability Act (HIPAA) Security and Privacy Rules. HIPAA mandates that healthcare providers implement rigorous administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronic protected health information. The occurrence of a data breach of this nature strongly suggests that required security protocols—such as advanced encryption, multi-factor authentication, network segmentation, or continuous threat monitoring—may have been inadequately maintained or implemented, representing a direct failure of these statutory obligations under both federal and state consumer protection laws.
Receiving an official data breach notification letter from Greater St. Louis Oral & Maxillofacial Surgery PC serves as formal legal acknowledgment that your confidential information was compromised due to inadequate corporate security measures. Under the law, this notification establishes your legal standing to participate in a class action lawsuit aimed at holding the practice accountable for failing to safeguard your sensitive data. Affected individuals do not need to demonstrate actual financial or medical fraud to seek legal recourse; the increased risk of future harm and the cost of mitigation are sufficient. Our firm handles these complex data breach cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only recover fees if we successfully secure a recovery on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC
You were a customer, patient, employee, or client of GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC
Your personal information was stored in GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC 's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Do not discard the GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC letter. It documents your standing as an affected individual — the foundation of any claim you file.
Look for the credit-monitoring offer section of your GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Time limits can forfeit your claim. Have attorneys review your GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC 's systems were compromised, exposing stored personal records.
Reported to Attorney General
October 6, 2025
GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC filed its official breach notice with the Illinois Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Several forms of recovery may be available to GREATER ST. LOUIS ORAL & MAXILLOFACIAL SURGERY PC letter recipients — the exact mix depends on state law and the data types exposed:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Illinois's Personal Information Protection Act (PIPA) and Biometric Information Privacy Act (BIPA) provide some of the strongest data protection rights in the country. BIPA allows statutory damages of $1,000–$5,000 per violation, and class actions have resulted in substantial settlements.
Other companies have notified the Illinois AG of breaches. Received one of these letters as well? You may have more than one claim.
Power Solutions International, Inc
Illinois · Jan 2025
Sunflower Medical Group
Illinois · Jan 2025
Orthominds, Llc (Supplemental)
Illinois · Jan 2025
Healthcare Service Corporation
Illinois · Jan 2025
The Pavilion At Healthpark Llc
Illinois · Jan 2025
Rosecrance Health Network
Illinois · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris