HackingData ExfiltratedCustomer Data InvolvedPIIPHIIDENTITY_BASICLowContained
ANNE ARUNDEL DERMATOLOGY MANAGEMENT, LLC
bd_fbd042e2d3263799 · schema v1 · pii pii-v1
Full breach record for ANNE ARUNDEL DERMATOLOGY MANAGEMENT, LLC →Anne Arundel Dermatology notified affected individuals of a data breach involving unauthorized third-party access to systems containing personal and health information. The incident occurred between February 14, 2025, and May 13, 2025. The breach potentially affected 124 Rhode Island residents. The company engaged third-party experts, implemented additional security measures, and offered 24 months of complimentary identity theft protection services through IDX.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2711035b7209e269Montana State AGfiled 2025-07-11Candidate
- bd_32e2060a3205fc73California State AGfiled 2025-07-11Verified
- bd_8696e51394d3f84aVermont State AGfiled 2025-07-11Verified
- bd_953114c4c8d6d4feTexas State AGfiled 2025-07-11Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2025/07/AAD_IDX-Notification-Letter-Final.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2025
- Raw hash
- d5b8650a99b25707dd6d39142a423f4576fdadb3d51c424956ae0d41002b4581
Reporting entity
- Name
- ANNE ARUNDEL DERMATOLOGY MANAGEMENT, LLCnorm: anne arundel dermatology management
Victim entity
- Name
- ANNE ARUNDEL DERMATOLOGY MANAGEMENT, LLCnorm: anne arundel dermatology management
Incident
- Discovered
- May 20, 2025
- Materiality determined
- —
- Notification sent
- Jul 11, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.