The Tsar Team hacking group recently stole hundreds of patients’ personal data from a plastic surgery clinic in Lithuania: names, surnames, personal identity codes, pre-op and intimate photos. When no ransom was forthcoming, the hackers made the info public, prompting the authorities to launch a pre-trial investigation into this unprecedented situation. A parallel investigation into the clinic’s affairs uncovered that it didn’t take all the necessary precautions to protect patients’ data.