QualDerm Partners, LLC recently reported a significant data breach involving unauthorized access to sensitive patient data. The breach, which occurred between December 23 and December 24, 2025, potentially exposed the personal and medical information of current and former patients across 17 states.
QualDerm Partners Data Breach Investigation
QualDerm Partners, a company providing business management services to dermatology, skin cancer care, cosmetics, plastic surgery, and pathology practices, detected unauthorized activity on its systems on December 24, 2025. Upon discovering the breach, QualDerm took immediate steps to contain the incident and launched an investigation in collaboration with a third-party cybersecurity firm.
The investigation revealed that an unauthorized actor gained access to certain systems within the network between December 23 and December 24, 2025. During this time, the cybercriminal extracted sensitive data stored on these systems. While the investigation is ongoing, the company has notified individuals whose personal information may have been compromised.
The compromised data may vary for each individual but could include the following personal and medical information:
-
Personal Information: Full name, date of birth, email address, doctor’s name, government-issued ID (e.g., driver’s license number)
-
Medical Information: Medical record number, treatment details, diagnosis information, health insurance details, patient account information, date of death
Though QualDerm has not reported any misuse of the exposed information, the breach of such sensitive data raises significant concerns about the potential for identity theft, medical fraud, and other forms of misuse. In response to the breach, QualDerm Partners is offering affected individuals complimentary credit monitoring and identity protection services to help mitigate any potential risks.
The company also assured patients that it had notified federal law enforcement and regulatory agencies, and it is reviewing its policies and procedures regarding information security to prevent future incidents.
When Did This Breach Occur?
According to QualDerm Partners:
-
Date(s) the Breach Occurred: December 23, 2025 – December 24, 2025
-
Date the Breach Was Discovered: December 24, 2025
The unauthorized access and data extraction took place over a two-day period in December 2025, and the breach was identified by QualDerm on December 24, 2025.
What Information Was Breached?
The breach may have involved the following types of sensitive personal and medical information:
-
Personal Information: Full name, date of birth, doctor’s name, email address, government-issued identification (e.g., driver’s license number)
-
Medical Information: Medical record number, treatment details, diagnosis information, health insurance information, patient account number, date of death
For a small number of affected individuals, government-issued identification information (such as driver’s license numbers) may have also been compromised.
What You Can Do
If you received a notification from QualDerm Partners, take the following steps to protect your personal and medical information:
-
Enroll in the complimentary credit monitoring and identity protection services offered by QualDerm Partners. These services will help detect any suspicious activity related to your credit and personal information.
-
Monitor your financial accounts for unauthorized transactions or irregularities.
-
Review your Explanation of Benefits (EOB) statements for any unfamiliar charges or services that you did not authorize.
-
Place a fraud alert or security freeze on your credit file with the major credit bureaus (Equifax, Experian, and TransUnion) to prevent unauthorized access to your credit.
-
Report any suspicious activity to the institution that issued the account or the relevant authorities.
While there has been no evidence of fraud or identity theft to date, the exposure of sensitive personal and medical information raises significant risks. Staying vigilant by regularly monitoring your accounts is an important step in minimizing potential harm.
File a Data Breach Lawsuit Against QualDerm Partners
If you received notice that your personal or medical information was exposed in the QualDerm Partners data breach, you may have the right to pursue legal action.
Data breach lawsuits hold organizations accountable for failing to protect sensitive personal and medical data. If you were impacted by this breach, compensation may be available for out-of-pocket expenses, identity protection services, and other damages resulting from the exposure of your data.
You do not have to face this situation alone. Learning about your legal rights and options can help you determine whether pursuing a class action lawsuit is right for you.
Contact us at Class Action U, where we can connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received a notification, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
