Anne Arundel Dermatology Data Breach Investigation
The data breach lawyers at The Lyon Firm are investigating a recently reported data breach at Anne Arundel Dermatology, a large dermatology practice with over 100 locations across seven states. The cybersecurity breach may have exposed the personal and health information of thousands of patients. Contact our legal team to discuss filing a claim if you believe your personal data may have been compromised. We represent class action clients in all fifty states.
What Happened at Anne Arundel Dermatology?
Anne Arundel Dermatology, a provider of medical, pediatric, surgical, and aesthetic dermatology services in Florida, Georgia, Maryland, North Carolina, Pennsylvania, Tennessee, and Virginia. Unauthorized access was detected on company servers between February 14 and May 13, 2025, leaving a large amount of personal information vulnerable. An internal investigation, aided by third-party cybersecurity experts, confirmed that sensitive files were accessed during this three-month window.
The compromised data may include the following: names, addresses, dates of birth, email addresses, medical record numbers, health histories, financial information, insurance details, and appointment histories—information that constitutes both personally identifiable information (PII) and protected health information (PHI) under HIPAA.
The exposure of such sensitive data carries significant risks, particularly given the medical nature of the information. Victims should understand the risks of fraud and medical identity theft. Patients now face the burden of monitoring accounts, freezing credit, and addressing potentially fraudulent activity, all while grappling with the emotional toll of privacy violation. Call our attorneys to learn more about how to protect yourself following any data theft incident.
The timing and handling of the breach raises questions about a possible inadequate monitoring or outdated security protocols. HIPAA mandates prompt reporting and robust safeguards, yet the delay in notifying authorities and patients—beyond the 30-60 day windows required by some states—may violate federal and state laws. Reports indicate the breach was reported to the Texas and California Attorney General’s offices on July 11, 2025.
For affected individuals, filing a class action complaint can offer a viable path to justice and compensation. Individually, patients may struggle to confront a large healthcare provider like Anne Arundel, but a class action unites thousands, amplifying their collective demand for accountability. A successful class action could secure compensation for out-of-pocket costs and lost wages.
Our lawyers work on contingency, meaning victims pay nothing upfront. Fees are covered by any settlement, making legal action accessible to all affected, regardless of financial status. Call for a free consultation.