Aesthetic Surgical Images Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Patients of Aesthetic Surgical Images may face exposure of internal files after the practice was listed in connection with a ransomware incident. The listing appeared on July 7, 2026. The number of people affected is not known, and no further details on the volume or contents of the files have been released publicly.

Inside the incident

The only confirmed information is that internal files were allegedly exfiltrated during a ransomware attack and that the incident was reported on July 7, 2026. No figure for the number of records or individuals involved has been disclosed. The method of initial access, the duration of the intrusion, and whether any data was later published remain undisclosed.

The group behind it: incransom

Incransom is a ransomware group that maintains a leak site where it lists organizations it claims to have targeted. The group typically uses encryption to disrupt operations and exfiltrates data to pressure victims. Its listings are presented by the group itself; independent confirmation of any specific claim is not provided in the available facts about this case.

Who is Aesthetic Surgical Images?

Aesthetic Surgical Images is a plastic surgery practice based in Omaha, Nebraska, that has operated since 1968. Like other medical practices, it maintains patient medical records and provides a process for patients to request copies of those records. The practice states that its records are managed by Morgan Records Management to meet state and federal retention and confidentiality requirements.

What was likely exposed

The facts state that internal files were exfiltrated. Medical practices routinely hold patient identifiers, clinical notes, treatment histories, and billing information. The precise categories of data contained in the exfiltrated files have not been disclosed, so the exact contents remain unconfirmed.

The real-world impact

Exposure of internal medical files can create privacy risks for patients whose records are involved, including potential misuse of personal health details. For the organization, the incident adds operational disruption and the need to address any regulatory obligations that follow a ransomware event. Both the scale of these effects and the status of any recovery steps are not publicly detailed at this time.

Were you affected?

Individuals who have been patients of Aesthetic Surgical Images can begin by contacting the practice directly to ask about the status of their records. Running a free exposure scan of an email address against known breach data sets can show whether the address has appeared in previously published incident records, though such scans do not cover every unreported or newly listed event.

AICompiled with AI assistance from public sources and published under our editorial standards.