QualDerm Partners

Disclosed Feb 22, 20267 months ago3,117,874 affectedConfirmed

What is known

People affected	3,117,874 (as reported by the organization)
Disclosed	Feb 22, 2026
Discovered	Dec 24, 2025
Happened	Dec 23, 2025
Attack	Ransomware
Data exposed	Names, Health, Insurance, Dates of birth, Addresses
Sector	Healthcare · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: QualDerm Partnersoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: QualDerm Partnersatg.wa.gov · Official notice	Official notice
Oregon DOJ breach notice: QualDerm Partnersjustice.oregon.gov · Official notice	Official notice
HHS OCR breach report: QualDerm Partners (Healthcare Provider, TN)ocrportal.hhs.gov · Official notice	Official notice
Texas Attorney General data security breach report BR-0004855: QualDerm Partnersoag.my.site.com · Official notice	Official notice

Where	Filed	People
HHS OCRtotal	Feb 22	2,951,318
California AGresidents of CA	Feb 23
Washington AGresidents of WA	Feb 23	753
Oregon DOJresidents of OR	Feb 23	3,117,874
Texas AGresidents of TX	Feb 24	174,837

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Mar 17, 2020Mar 17, 20206 years ago	Mar 17, 20206 years ago	Not stated	Healthcare	Confirmed	109

History of this record

2026-09-25 · data_types: ["names","health"] to ["names","health","insurance","dob","addresses"] · backfill source
2026-09-25 · records_basis: hhs to organization · backfill source
2026-09-25 · records: 2951318 to 3117874 · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 2951318 · backfill source
2026-09-25 · disclosed: 2026-02-23 to 2026-02-22 · backfill source
2026-09-25 · sector: other to health · backfill source
2026-09-25 · attack: unknown to ransomware · backfill source
2026-09-25 · discovered: empty to 2025-12-24 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.