Long Island Weight Loss Institute Data Breach

On September 22, 2025, Long Island Weight Loss Institute (LIWLI) discovered a data breach potentially exposing sensitive health information, including Social Security numbers, medical records, and payment details. While no misuse has been confirmed, LIWLI is offering free credit monitoring and fraud protection. Affected individuals may be eligible for compensation through a class action lawsuit. Contact Class Action U today for a free consultation to learn more about your legal options.

Long Island Weight Loss Institute
Date of Breach: November 19, 2025
CAU logo

Who was affected:

Clients of Long Island Weight Loss Institute

Impacted Data:

Full name

Address

Phone number

Email address

Date of birth

Social Security number

Passport number

On November 19, 2025, Long Island Weight Loss Institute (LIWLI) disclosed a significant data security event that may have impacted protected health information for several individuals. The breach, which occurred on or around September 22, 2025, exposed sensitive patient data, including personal identification and health-related information. Affected individuals may be entitled to compensation through a class action lawsuit.

Long Island Weight Loss Institute’s Data Breach Investigation

Long Island Weight Loss Institute (LIWLI) was alerted to unusual activity within its computer systems on September 22, 2025. Upon discovering this potential breach, LIWLI immediately took steps to secure its network and engaged a third-party cybersecurity team to investigate the incident further. The investigation revealed that a limited amount of protected health information (PHI) may have been accessed as a result of this breach.

The forensic team was unable to fully confirm whether an unauthorized actor had accessed the data; however, there is no evidence to suggest that the information was misused. Despite the lack of confirmed misuse, LIWLI has been proactive in notifying potentially affected individuals and providing assistance to help protect their personal information.

The breach has raised concerns as the compromised data could include a wide range of sensitive information, from names and addresses to Social Security numbers and medical details. Although LIWLI has stated that no misuse of the data has been reported, the exposure of such sensitive information is significant, and affected individuals may face risks such as identity theft and fraud.

In response to the breach, LIWLI has implemented stronger security measures and is reviewing its data security policies to prevent similar incidents in the future. Additionally, LIWLI has offered complimentary credit monitoring services to those impacted by the breach, in an effort to further protect their personal information.

When Did This Breach Occur?

The breach occurred between September 22, 2025, and was discovered on November 19, 2025. Affected individuals were notified by mail on January 5, 2026.

What Information Was Breached?

The following types of protected health information (PHI) were potentially compromised in the breach:

  • Full name

  • Address

  • Phone number

  • Email address

  • Date of birth

  • Social Security number

  • Passport number

  • Driver’s license number

  • Government-issued photo ID

  • Medical record number

  • Medical treatment information

  • Lab results

  • Diagnosis/conditions

  • Prescription information

  • Health insurance information

  • Claims information

  • Invoice, billing, and payment information

  • Credit card/bank account information

It is important to note that the specific data impacted may vary for each individual, and not all individuals may have had all of the above information compromised.

What You Can Do

If you were affected by this data breach, there are several steps you can take to protect yourself:

  1. Sign Up for Free Credit Monitoring: LIWLI is offering free credit monitoring services to those impacted by the breach. These services will alert you to any suspicious activity or changes in your credit file.

  2. Monitor Your Financial Accounts: Regularly check your bank and credit card statements for any unauthorized transactions or discrepancies. Early detection can help mitigate financial losses.

  3. Place a Fraud Alert: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to place a fraud alert on your credit report. This will notify creditors to take extra precautions when verifying your identity.

  4. Consider a Credit Freeze: Freezing your credit file will prevent new creditors from accessing your credit report, providing additional protection against identity theft.

  5. Stay Alert for Phishing Scams: Be cautious of any unsolicited phone calls or emails that ask for your personal information. Always verify the source before sharing sensitive data.

In addition to these steps, LIWLI is also offering fraud assistance through Cyberscout, a TransUnion company specializing in fraud prevention and remediation services. This can help guide you through the process of addressing any potential identity theft issues.

File a Data Breach Lawsuit Against Long Island Weight Loss Institute

If you received a breach notification or believe your personal information was impacted, you may be entitled to file a class action lawsuit against Long Island Weight Loss Institute. Even though the company has stated there is no confirmed misuse of information, the exposure of sensitive health data is a serious matter, and those affected should not bear the burden alone.

By joining a class action lawsuit, you can pursue compensation for any emotional distress, financial losses, or other damages caused by the breach. Class action lawsuits provide a way for individuals to hold companies accountable while pooling resources for a stronger case.

If you were impacted, don’t wait—contact Class Action U to explore your legal options. Fill out our quick, easy, and secure form to speak with a lawyer today. There’s no cost or obligation to reach out, and we’re here to guide you every step of the way.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: April 17, 2025, to June 30, 2025
Date of Breach: November 19, 2025
Date of Breach: September 29, 2025

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.