Almeida Law Group is investigating a data breach at Universal Dermatology & Vein Care. If you were affected, contact Almeida Law Group.
About Universal Dermatology & Vein Care
Universal Dermatology & Vein Care is a medical, surgical, and cosmetic dermatology practice with locations in the Central Ohio area, including Columbus, Lewis Center, and Mount Vernon, Ohio. The practice is co-founded and led by Dr. George Skandamis, a board-certified dermatologist, and offers services ranging from skin cancer treatment and conditions such as acne, eczema, and psoriasis to vein treatment, Botox, and laser procedures. Because the practice is a healthcare provider, patient records it maintains may include sensitive medical and personal information, though the specific data types involved in this breach were not specified in the HHS filing.
What Happened?
Universal Dermatology & Vein Care was listed in a HHS Office for Civil Rights breach portal report submitted on September 30th, 2026. The incident was classified as a Hacking/IT Incident involving information stored on a network server, and it affected 35,295 individuals. The filing notes that a business associate was present, meaning a third-party vendor or service provider may have been involved in the breach. The specific types of information exposed were not identified in the filing, and no public notification letter or substitute notice has been located.
The HHS filing lists the state as Florida, while Universal Dermatology & Vein Care operates in Ohio. This discrepancy, combined with the business associate involvement, raises the possibility that the breach originated at a Florida-based third-party vendor rather than at the practice’s own systems. For context, DermCare Management — a Hollywood, Florida-based practice management company serving more than 70 dermatology clinics — disclosed a large-scale breach in 2025 affecting approximately 1.36 million individuals across multiple states. However, no source confirms that Universal Dermatology & Vein Care was among DermCare’s affected practices, and any connection remains speculative. No related litigation specific to this breach has been identified.
Key Facts at a Glance
- Company or Organization: Universal Dermatology & Vein Care
- Industry: Healthcare Provider — Dermatology and Vein Care
- Location: Dublin, Ohio (with offices in Lewis Center, OH and Mount Vernon, OH; HHS filing lists state as FL, which may reflect a business associate’s location)
- Incident type: Hacking/IT Incident
- Date of consumer notification: September 30th, 2026
- Total persons affected: 35,295
- Source: HHS OCR Breach Portal — Universal Dermatology & Vein Care, Universal Dermatology & Vein Care — Official Website, Paubox — DermCare Management breach, HIPAA Journal — Largest Healthcare Data Breaches of 2025
What Should You Do?
If you received a notice from Universal Dermatology & Vein Care, review it carefully to understand what information was involved. Even if specific data types have not yet been publicly identified, it is a good idea to place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and to monitor your credit reports for any unfamiliar accounts or activity. You can request free annual credit reports at AnnualCreditReport.com. Because the practice is a medical provider, you should also review any Explanation of Benefits statements from your health insurer and check your medical records for services you do not recognize. If you suspect misuse of your personal information, report it at IdentityTheft.gov, which offers personalized recovery plans.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
