Pennsylvanie Dermatology Partners Data Breach Investigation

Data Breach Blog

Data Breach

Pennsylvanie Dermatology Partners Data Breach Investigation

Almeida Law Group Calendar Icon

Date of data breach:

August 20, 2026

by: Almeida Law Group

Almeida Law Group is investigating a data breach at Pennsylvanie Dermatology Partners. If you were affected, contact Almeida Law Group.

About Pennsylvanie Dermatology Partners

Dermatology Partners — listed in the HHS breach portal as “Pennsylvanie Dermatology Partners” and operating publicly at dermpartners.com — is a dermatology practice group with offices across Pennsylvania, Delaware, and Maryland. The practice offers medical, surgical, and Mohs surgery dermatology services, treating conditions of the skin, hair, and nails, including skin cancer detection and treatment. Locations include offices in Philadelphia, Bensalem, and West Lawn, Pennsylvania, as well as Catonsville, Maryland, which is the office where this breach occurred. Because the practice handles patient medical records, health insurance information, and other protected health information, a breach at one of its locations carries meaningful privacy and identity risks for affected patients.

What Happened?

Pennsylvanie Dermatology Partners was listed in an HHS Office for Civil Rights breach portal report submitted on July 30th, 2026, describing a hacking or IT incident affecting a network server at the organization’s Catonsville, Maryland office.

According to the company’s own breach notice posted on its website on June 23rd, 2026, an unauthorized individual accessed the data system at the Catonsville location between February 27th, 2026, and March 10th, 2026. The company stated there is no evidence that any data was copied or removed, but it could not determine which patient records, if any, may have been viewed. Out of an abundance of caution, Dermatology Partners notified all patients seen at the Catonsville location. Information that may have been viewable during the unauthorized access includes patient names, dates of birth, addresses, contact information, medical record numbers, dates of service, diagnosis and treatment information, and potentially health insurance information. The HHS portal lists 500 individuals as affected, though the company’s notice did not disclose a specific count — 500 is the minimum threshold commonly used in HHS filings when an exact number has not been determined. No business associate was identified as involved in the incident.

Key Facts at a Glance

  • Company or Organization: Pennsylvanie Dermatology Partners (operates as Dermatology Partners / dermpartners.com)
  • Industry: Healthcare – Dermatology
  • Location: Catonsville, MD (breach location); additional offices in Pennsylvania and Delaware
  • Incident type: Hacking/IT Incident – Network Server
  • Date of breach: February 27th, 2026
  • Date breach discovered: March 10th, 2026
  • Date of consumer notification: June 23rd, 2026
  • Total persons affected: 500 (reported to HHS; may be a placeholder figure)
  • Source: HHS Office for Civil Rights breach portal report; Dermatology Partners official breach notice

What Should You Do?

If you were a patient at Dermatology Partners’ Catonsville location, start by reviewing any identity protection enrollment instructions included in the notice you received from the practice. Even if the company found no evidence of data exfiltration, the possibility that medical and personal records were viewed is enough to warrant caution. Place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your credit reports for any unfamiliar accounts or inquiries. You can request free annual credit reports at AnnualCreditReport.com. Because health and insurance information may have been exposed, review your Explanation of Benefits statements and any medical records for services you do not recognize, which can be a sign of medical identity theft. If you discover any suspicious activity, report it to the Federal Trade Commission at IdentityTheft.gov, which will help you create a personalized recovery plan.

Your Legal Rights

If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.

Were You a Victim of a Data Breach?

"*" indicates required fields

By clicking the SEND button and submitting this form, I consent to receive communications from Almeida Law Group LLC and their co-counsel by phone call, email, and/or SMS regarding this matter and other potential legal matters. I understand that message and data rates may apply and that consent to such contact is not required for use of these services. Message frequency varies. Reply STOP to opt-out and HELP for help. I also agree to the Privacy Policy. I understand that my information may be shared with advertising partners to deliver targeted advertisements and optimize outreach efforts. I confirm that I am at least 18 years old. I have read and understand the disclaimer above. I agree my use of this site and the information provided here is not intended to create and does not create an attorney client relationship with the Almeida Law Group and/or attorneys employed by the Firm. No attorney client relationship is intended or created unless and until an engagement agreement is signed by all relevant parties. The contents of this site constitute attorney advertising and not legal advice; therefore you should not act or rely upon any information contained herein, and should always seek the advice of an attorney.

Resourceful. Resilient. Relentless.

Contact us today to get the justice you and your family deserve.