Anne Arundel Dermatology
Data Breach Class Action Lawsuit

Posted: July 16, 2025 -- Attention, victims of the Anne Arundel Dermatology data breach.

Abington Cole + Ellery is investigating the data breach recently announced by Anne Arundel Dermatology.

Anne Arundel Dermatology Data Breach Summary:

Approximately 1.9 million individuals were affected by the Anne Arundel Dermatology data breach, and breached data may include, but is not necessarily limited to: protected health information.

Anne Arundel Dermatology detected unauthorized access on February 14, 2025, through to May 13, 2025. The intrusion was confirmed on May 20 after security teams determined that specific data files were accessed by an unknown party, remaining exposed until containment steps were taken. A full internal examination, completed on June 27, revealed that various personal and health-related details were present in the compromised files.

The affected records include names, addresses, dates of birth, health insurance information, medical histories, and in some instances government ID numbers like Social Security numbers. The firm confirmed it could not verify whether the data had been viewed or extracted. The company reported the incident to various state authorities—including the Texas and California Attorneys General—on July 11, 2025, and to the Department of Health and Human Services the same day.

Following containment, the practice engaged third‑party cybersecurity experts to investigate and implemented additional technical safeguards. They also began notifying individuals impacted—approximately 1,862 in Texas alone—with letters and emails, offering two years of free identity‑theft protection, including credit monitoring and insurance coverage. State-level breach disclosures are ongoing, and legal firms have initiated inquiries to determine if affected individuals are entitled to compensation.

As a result of the data breach, Anne Arundel Dermatology is offering 24 months of free credit monitoring and/or identity theft protection services to some affected individuals.

Additional information about the Anne Arundel Dermatology data breach may be found here: Anne Arundel Dermatology (HIPAA Journal post). The Anne Arundel Dermatology Website may also have additional information about or provide periodic updates regarding the data breach.

About Anne Arundel Dermatology:

Anne Arundel Dermatology is a healthcare provider specializing in dermatological services, headquartered in Linthicum Heights, Maryland. The organization operates a network of clinics across several states in the eastern United States, including Maryland, Virginia, Tennessee, Pennsylvania, North Carolina, South Carolina, Georgia, and Florida. Established in 1976, Anne Arundel Dermatology offers medical, surgical, and cosmetic dermatology services to address a range of skin-related conditions.

The organization's medical services include treatment for conditions such as acne, psoriasis, eczema, skin cancer, and other dermatological disorders. Surgical offerings cover Mohs micrographic surgery, a specialized technique employed for the precise removal of certain types of skin cancers. In addition, Anne Arundel Dermatology provides cosmetic procedures such as laser treatments, chemical peels, dermal fillers, and Botox injections.

Anne Arundel Dermatology has expanded through partnerships and acquisitions of other dermatology practices to broaden its geographic reach and service offerings. The company participates in various insurance networks and collaborates with regional healthcare providers and hospitals. Anne Arundel Dermatology emphasizes patient education and preventive care, regularly providing information and resources about skin health to patients and the broader community.

For more information about steps you can take to possibly reduce the chances harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach?

If you believe you are a victim of the Anne Arundel Dermatology data breach, and if you would like to volunteer to serve as a class representative in a class action lawsuit regarding this data breach, please submit your information via the form on this webpage. This website is not associated with nor authorized by Anne Arundel Dermatology or any affiliated companies. If you have received any other data breach notifications, you may to review Abington Cole + Ellery's current list of data breach investigations.