BEVERLY HILLS—A security breach at an exclusive plastic surgery clinic, located at 421 N. Rodeo Drive, has placed patients’ private records in jeopardy, CBS Los Angeles first reported. The medical and financial records of more than 15,000 patients in 16 states and 4 countries were reportedly stolen by a disgruntled former staffer, who was fired for allegedly stealing from the clinic.

Many of the clients are high-profile celebrities. A spokesperson for Dr. Zain Kadri’s practice indicated the staffer not only stole medical and financial information, but took photos of patients while they were unconscious and posted them on social media.

According to the spokesperson, the discovery of the theft transpired during a company audit, when the photos were found in a company phone.

The former employee was hired as a driver and translator for Dr. Kadri in September 2016 and was later placed on administrative duties. While working at the clinic, the employee had access to personal information including patients’ credit and debit card information, checks, and usernames and passwords.

Dr. Kadri’s office said they reported the incident to the Los Angeles Sheriff Department and were rushing to inform their patients of the breach. It is unclear whether charges will be filed against the former employee. The clinic specializes in facial plastic surgery and provides otolaryngological services. According to the practice’s Facebook page, Dr. Kadri receives many “A-list celebs” who stock his “high-profile clientele.”