Proliance Surgeons Data Breach Lawsuit

A ransomware group says it stole data from Proliance Surgeons in 2026 and is threatening to publish it. Proliance has not confirmed the attack. In 2023, a ransomware attack on the same Seattle surgical network exposed the information of 437,392 people.

What the Ransomware Group Is Claiming

Proliance Surgeons is a physician-led surgical network based in Seattle. It offers orthopedics, general surgery, ear, nose and throat care, eye surgery and neurosurgery at more than 100 locations.

On September 2, 2026, a ransomware group called PayoutsKING listed Proliance Surgeons on its leak website. According to ransomware.live, a site that tracks these postings, the attack is estimated to have happened around August 18, 2026. The group claims to have taken 6.6 terabytes of data, and its listing names categories including confidential files, customer personal information, employee personal information, correspondence and financial records.

The group warned that “the full leak will be published soon, unless a company representative contacts us,” according to DeXpose. This is called double extortion: criminals lock or steal a company’s files, then threaten to release the stolen data unless they are paid.

These are claims by criminals and have not been confirmed. As of October 6, 2026, Proliance Surgeons has not issued a public notice, and no filing with federal health regulators or state Attorneys General has been found.

Proliance Has Been Breached Before

If confirmed, this would be at least the third security incident at Proliance Surgeons since 2019:

• 2019 to 2020: Proliance’s online payment page was compromised from November 13, 2019 to June 24, 2020. The company’s December 2020 notice said payment card information may have been exposed.
• 2023: Attackers broke into Proliance’s network on February 11, 2023 and deployed ransomware. Notice letters did not go out until November 2023, about nine months later. The breach affected 437,392 people, according to HIPAA Journal, and exposed names, Social Security numbers, dates of birth, medical and treatment information, health insurance information and medical record numbers. Lawsuits over that breach were consolidated in King County Superior Court.
• 2026 (claimed): the PayoutsKING listing described above.

Repeated incidents at the same organization raise questions about whether it fixed the weaknesses that led to earlier breaches.

What Information May Be at Risk?

No notice has confirmed what was taken in 2026. Based only on the group’s listing, the data it claims to hold includes:

• Customer (patient) personal information
• Employee personal information
• Confidential company files
• Correspondence
• Financial records

A surgical practice typically holds names, dates of birth, Social Security numbers, insurance details and medical records. Whether any of that was taken in 2026 has not been confirmed.

Has Proliance Offered Anything?

Not yet. Proliance has not issued a notice or offered credit monitoring for the 2026 claim. If the company confirms a breach, affected people should receive a letter explaining what was taken and what help is available.

What Patients and Employees Can Do Now

People do not need to wait for a letter to protect themselves. Current and former Proliance patients and employees can take these steps:

• Place a free credit freeze with Equifax, Experian and TransUnion
• Review Explanation of Benefits statements from their health insurer for care they did not receive
• Watch for phishing emails, texts or calls that mention Proliance, surgery bills or the breach
• Keep any letter from Proliance about this or the 2023 incident

Do You Have Legal Options?

Healthcare providers that collect patient medical and financial information have a legal obligation to safeguard it, and to notify patients promptly when it is exposed. Repeated breaches can be part of that picture. Patients and employees affected by a confirmed breach may have legal rights and remedies worth discussing with an attorney. Emery | Reddy is investigating this incident.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. No Fee Unless We Recover. Call 916.995.5968.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft or insurance fraud.

Frequently Asked Questions

Did Proliance Surgeons have a data breach in 2026?

It has not been confirmed. A ransomware group called PayoutsKING claimed the attack on September 2, 2026. Proliance has not issued a public notice as of October 6, 2026.

Who is PayoutsKING?

PayoutsKING is a ransomware group that has run a leak website since 2025. It uses double extortion: it steals data and threatens to publish it unless the victim pays.

How many people could be affected?

No one knows yet. Proliance says it serves more than 800,000 patients a year, and its 2023 breach affected 437,392 people. The number for 2026, if confirmed, has not been disclosed.

I was affected by the 2023 Proliance breach. Is this the same thing?

No. The 2023 breach happened in February 2023 and was announced in November 2023. The 2026 claim is a separate, newer incident.

What should I do if I am a Proliance patient or employee?

• Freeze your credit with all three credit bureaus.
• Check your insurance statements for care you did not get.
• Be careful with messages that mention Proliance or the breach.
• Watch your mail for a notice letter, and keep it if one arrives.

Can I talk to a lawyer before I get a letter?

Yes. A Free Case Review can help you understand your options now, and what to watch for if a notice arrives.

Do I have a legal claim?

You may. Healthcare providers have a duty to protect patient and employee information and to notify people promptly when it is exposed. If you are a current or former Proliance Surgeons patient or employee, contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.