Dermatology Associates

Dermatology Associates notified the Massachusetts Attorney General of an unauthorized access incident. The organization became aware of suspicious activity on August 4, 2025. An investigation determined that an unauthorized actor accessed systems between June 4, 2025, and August 5, 2025. The incident potentially involved protected health information (PHI), including names, addresses, dates of birth, and Social Security numbers. The organization engaged third-party cybersecurity specialists, notified affected individuals via website and media, and is offering 24 months of credit monitoring. The investigation is contained.

Dermatology Associates notified the NH AG of a data event affecting ~3 NH residents. Unauthorized access occurred between June 4 and August 5, 2025; discovered August 4, 2025. Data involved: name, SSN, driver's license. Response included forensic investigation, credit monitoring via TransUnion, and regulatory notifications.

Leak of clinic customer data.

Dermatology Associates reported to HHS on 2025-10-03 a Hacking/IT Incident affecting 501 individuals. Breached information located on Network Server. The incident involved a ransomware attack compromising PHI including clinical, demographic, and financial data.

Associates In Dermatology reported a data breach to the Indiana Attorney General. The breach occurred on 2021-10-31 and was reported on 2023-03-17. 1,089 Indiana residents were affected. 8,517 individuals affected in total.

Associates in Dermatology reported to HHS on 2023-03-17 a Hacking/IT Incident affecting 12,060 individuals. Breached information located on Network Server. A vendor of its business associate was the subject of a ransomware attack affecting PHI including names, SSNs, diagnoses, and medications.

Associates in Dermatology, PLLC reported to HHS on 2019-07-16 a Hacking/IT Incident affecting 9,020 individuals. Breached information located on Email. An employee was victim of an email phishing scheme, leading to unauthorized access to ePHI including names, addresses, DOB, driver's license numbers, SSNs, health insurance info, financial data, treatment info, medications, and diagnoses. The entity implemented additional safeguards and retrained staff.

ASSOCIATES IN DERMATOLOGY filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-265). The register records the breach as discovered on April 24, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.