Anne Arundel Dermatology Data Breach (2025)
The 2025 Anne Arundel Dermatology data breach involved unauthorized access to organizational systems from February 14 through May 13, 2025.
The affected total is not confirmed, so severity cannot be determined from a record count alone.
Exposed Data Types
3 sensitive7- Medical information
- Health-insurance information
- Protected health information
- Names
- Physical addresses
- Dates of birth
- Other personal information specified in individual notices
About This Breach
The organization discovered the event on May 13 and determined on May 20 that affected files could contain personal or health information; it could not establish that a particular person’s information was viewed or removed.
HHS OCR reports 1,905,000 affected people. This is a regulatory notification population, not emails, local dataset rows, a patient count, or proof that every field occurred together for every person. No person or health data is locally imported.
The seven person-variable classes are names, physical addresses, dates of birth, medical information, health-insurance information, protected health information, and other personal information specified in an individual notice. Social Security numbers, financial data, and government IDs are not reported general scope.
The notice does not establish identity, dermatology-patient status, a particular diagnosis, treatment, provider, or insurance relationship, co-occurrence of every field, data removal, or misuse. December 9, 2025, is not part of the incident window; it is a legal cutoff in a separate settlement-class definition and must not be presented as incident scope.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
