Anne Arundel Dermatology
Disclosed Jul 11, 20251 year ago1,905,000 affectedSettled
Anne Arundel Dermatology intrusion exposes 1.9 million patients
Anne Arundel Dermatology said an intruder had network access from February 14 to May 13, 2025, and notified up to 1,905,000 people whose names, addresses, birth dates, medical and insurance data were on affected systems. It settled class claims for $2.4 million.
What is known
| People affected | 1,905,000 (as reported to HHS) |
|---|---|
| Disclosed | Jul 11, 2025 |
| Discovered | Jun 27, 2025 |
| Happened | Feb 14, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health, Insurance, Addresses, Dates of birth |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | $2.4M class action settlement (2026) |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Anne Arundel Dermatologyoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Anne Arundel Dermatologyattorneygeneral.delaware.gov · Official notice | Official notice |
| HHS OCR breach report: Anne Arundel Dermatology (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice | Official notice |
| Anne Arundel Dermatology Pays $2.4M to Settle Data Breach Lawsuithipaajournal.com · News | News |
| Anne Arundel Dermatology Data Breach Affects 1.9 Million Patientshipaajournal.com · News | News |
| July 2025 Healthcare Data Breach Reporthipaajournal.com · News | News |
| Largest Healthcare Data Breaches of 2025hipaajournal.com · News | News |
| Vermont Attorney General: 2025-07-11 Anne Arundel Dermatology Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jul 11, 2025 | |
| Delaware DOJresidents of DE | Jul 11, 2025 | 8,002 |
| HHS OCRtotal | Jul 11, 2025 | 1,905,000 |
| Vermont AGresidents of VT | Jul 11, 2025 | |
| Researchtotal | Jul 15, 2025 | 1,905,000 |
Other breaches at Anne Arundel Dermatology
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Aug 9, 2018Aug 9, 20188 years agoLost or stolen device | Aug 9, 20188 years ago | Lost or stolen device | Healthcare | Confirmed | 1,310 |
History of this record
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-07-11-anne-arundel-dermatology-data-breach-notice-consumers · backfill source
- 2026-09-25 · status: confirmed to settled · seed source
- 2026-09-25 · lawsuit: empty to $2.4M class action settlement (2026) · seed source
- 2026-09-25 · data_types: ["names","health","insurance"] to ["names","health","insurance","addresses","dob"] · seed source
- 2026-09-25 · summary: empty to Anne Arundel Dermatology said an intruder had network access from February 14 to May 13, 2025, and notified up to 1,905,000 people whose names, addresses, birth dates, medical and insurance data were on affected systems. It settled class cl · seed source
- 2026-09-25 · title: empty to Anne Arundel Dermatology intrusion exposes 1.9 million patients · seed source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 1905000 · backfill source
- 2026-09-25 · data_types: [] to ["names","health","insurance"] · backfill source
- 2026-09-25 · discovered: empty to 2025-06-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.