On or about February 26, 2025, DermCare Management (“DermCare”) became aware of suspicious activity involving its computer systems. According to the Notice of Data Event, DermCare promptly took steps to secure its network, initiated an internal investigation, and engaged third-party forensic specialists to determine what occurred.
Following the initial investigation, DermCare confirmed on March 3, 2025, that certain patient information may have been impacted. The forensic review later determined that files were accessed or taken without authorization between February 14, 2025, and February 26, 2025. Because of the complexity and volume of data involved, it was not until March 2, 2026, that DermCare identified the individuals whose information may have been affected and determined there was sufficient information to issue direct notification letters.
After identifying the affected files, DermCare worked to resecure its network environment and strengthen its overall security posture. The company reported that it enhanced system safeguards and took additional measures designed to reduce the risk of similar incidents in the future.
DermCare Management is a specialized practice management group supporting over 65 dermatology locations across Florida, Texas, Virginia, and California. They provide administrative, billing, marketing, HR, and operational support, allowing physicians to focus on patient care while expanding their practices.
DermCare also stated that, at the time of notification, it had not received reports of identity theft or fraud resulting from the incident. However, the investigation confirmed that unauthorized access to certain data may have occurred.
Individuals whose information may have been involved began receiving written notification letters starting in March 2026. If you received a Notice of Data Event from DermCare Management, it confirms that your personal and/or health information may have been impacted by this security incident.
As part of its response, DermCare is offering affected individuals complimentary credit monitoring and identity restoration services through Epiq for a specified duration, provided individuals enroll by the stated deadline in their notification letter.
What information is involved in the DermCare Management Data Breach?
Compromised information may include:
First Name
Last Name
Other Personally Identifiable Information (PII)
The specific data elements involved vary by individual and are detailed in each notification letter sent by DermCare.
Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other forms of misuse.
Much of the information involved in this incident may also qualify as Protected Health Information (PHI). PHI includes medical or healthcare-related data protected under federal and state privacy laws. When PHI is compromised, it can be misused for medical identity theft, insurance fraud, or other improper purposes—often in combination with other personal information.
If your information was involved in this incident, it is important to remain vigilant. Impacted individuals are encouraged to carefully review medical bills, insurance statements, and financial account activity for any suspicious or unfamiliar charges. DermCare also advises reviewing the guidance provided with the notification letter, including steps related to credit monitoring, fraud alerts, credit freezes, and identity restoration services.
Patients and consumers may have legal rights when companies that manage healthcare information fail to adequately safeguard sensitive personal and medical data. These rights vary by state and may depend on the nature of the information exposed and the circumstances surrounding the breach.
If you received a Notice of Data Event / Notice of Data Breach related to the DermCare Topco LLC (DermCare Management) incident, your personal and potentially health-related information may be at risk.
Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review.