On May 3, 2024, Affiliated Dermatologists and Dermatologic Surgeons, P.A. (“Affiliated Dermatologists”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights after discovering that an unauthorized party was able to access the company’s IT network. In this notice, Affiliated Dermatologists explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, dates of birth, mailing addresses, Social Security numbers, driver’s license numbers, passport numbers, medical treatment information, and health insurance claims information. Upon completing its investigation, Affiliated Dermatologists began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from Affiliated Dermatologists and Dermatologic Surgeons, P.A., it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Affiliated Dermatologists data breach. For more information, please see our recent piece on the topic here.

What Caused the Affiliated Dermatologists Data Breach?

The Affiliated Dermatologists data breach was only recently announced, and more information is expected in the near future. However, Affiliated Dermatologists’ filing with the U.S. Department of Health and Human Services Office for Civil Rights provides some important information on what led up to the breach. Affiliated Dermatologists also posted a website notice discussing the incident.

According to these sources, on March 5, 2024, Affiliated Dermatologists learned that it had been the recent target of a cyberattack in which an unauthorized party had gained access to the company’s IT network. In response, Affiliated Dermatologists disconnected access to the network, notified the company’s third-party IT provider, and then launched an investigation with the help of outside data security experts.

Ultimately, through this investigation, Affiliated Dermatologists confirmed that an unauthorized party was able to access portions of its network between March 2, 2024 and March 5, 2024, including files containing confidential consumer information.

After learning that sensitive consumer data was accessible to an unauthorized party, Affiliated Dermatologists reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, date of birth, mailing address, social security number, medical treatment information, driver’s license number, passport number, and health insurance claims information.

On April 25, 2024, Affiliated Dermatologists sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.

More Information About Affiliated Dermatologists and Dermatologic Surgeons, P.A.

Affiliated Dermatologists and Dermatologic Surgeons, P.A. is a dermatological healthcare practice based out of Morristown, New Jersey. Affiliated Dermatologists provide a range of medical and cosmetic services to patients, including skin cancer screenings, Mohs microsurgery, acne treatment, eczema treatment, phototherapy, Botox, chemical peels, and micro-needling. Affiliated Dermatologists employs more than 31 people and generates approximately $6 million in annual revenue.