DermCare Management Data Breach Lawsuit Investigation
Were you treated at a DermCare-affiliated clinic? Hackers may now have your Social Security number, medical records, and more. Act quickly—review the facts below and find out if you can claim compensation.
What Happened?
On February 26, 2025, DermCare Management—administrator for more than 70 dermatology and cosmetic clinics—detected suspicious activity within its computer network. A rapid internal investigation and outside forensics confirmed on March 3, 2025 that an unauthorized actor had copied patient data. The incident was later reported to the U.S. Department of Health and Human Services on May 2, 2025.
What Information Was Exposed?
The review indicates both personally identifiable information (PII) and protected health information (PHI) may have been taken, including:
- Full names and addresses
- Social Security numbers
- Dates of birth
- Driver’s license or government ID numbers
- Medical and health-insurance details
- Financial account information
The combination of medical and financial data makes affected individuals prime targets for identity theft, insurance fraud, and phishing scams.
Clinics & Partner Practices Involved
DermCare partners listed below have published their own “Notice of Data Event” confirming impact:
- Berman Skin Institute
- Dania Dermatology
- Hillcrest Plastic Surgery & Dermatology
- Hollywood Dermatology
- Keys Dermatology
- Miami Plastic Surgery
- Rendon Center for Dermatology & Aesthetic Medicine
- Skin & Beauty Center
- Skin Center of South Miami
- Florida Academic Dermatology Center
- Dermatology Treatment & Research Center
DermCare’s Response So Far
The company states it:
- Secured affected servers and engaged cybersecurity specialists.
- Is conducting a file-by-file review to identify every impacted patient.
- Will mail individual notification letters once that review concludes.
- Established a dedicated assistance line at 833-998-7517 (Mon–Fri, 9 a.m.–5 p.m. ET).
No complimentary credit-monitoring program has yet been confirmed.
Steps You Can Take Right Now
- Check your mail for any follow-up notice from DermCare or your clinic.
- Monitor bank, credit-card, and insurance statements for unfamiliar activity.
- Order free credit reports from Equifax, Experian, and TransUnion.
- Place a fraud alert (free, one year) or a credit freeze (free, until lifted).
- Watch medical Explanation-of-Benefits (EOBs) for services you did not receive.
- File reports of suspected identity theft with the FTC and your state attorney general.
Your Legal Options
Healthcare providers have a duty to safeguard patient information. When they fail, state and federal laws—including HIPAA—allow victims to seek relief. Potential compensation may cover:
- Out-of-pocket expenses for credit monitoring or identity-theft recovery
- Time spent addressing fraud or sealing credit reports
- Any proven financial losses or unauthorized charges
About DermCare Management
Founded in 2017, DermCare Management handles back-office services—billing, compliance, HR, marketing—for dermatology and aesthetic medicine practices. It now supports 70+ locations across Florida, Texas, Virginia, and California, serving over 700,000 patients and partnering with more than 140 medical providers.
Frequently Asked Questions
Is DermCare Management offering free credit monitoring?
As of the latest notice, DermCare has provided guidance and a helpline but has not confirmed complimentary credit-monitoring or identity-theft services.
How do I know if my information was compromised in the DermCare Management breach?
If your data was involved, DermCare or your specific clinic should mail you a detailed letter. You can also call the assistance line (833-998-7517) or review the partner-practice notices linked in the Sources sidebar.
Can I sue DermCare Management for the data breach?
Possibly. Victims may pursue individual or class-action claims for negligence or violations of privacy laws. Eligibility depends on factors such as residency, type of data exposed, and resulting damages.
What damages could I recover?
Courts may award reimbursement for fraud losses, the value of time spent remedying identity theft, and statutory damages in certain states. Punitive damages are sometimes available if gross negligence is proven.
Why is health information so valuable to hackers?
Medical records contain full identifiers plus insurance details, enabling tax fraud, prescription fraud, and fake medical billing—yielding higher black-market prices than standalone credit-card numbers.
Get a Free Case Review
Complete our secure form to receive a no-cost evaluation. Deadlines to file may apply, so act quickly to preserve your rights.