On March 5, 2024, Affiliated Dermatologists & Dermatologic Surgeons P.A. detected a cybersecurity attack when an unauthorized third party accessed their network and left a ransom note. The breach was identified quickly, and the company took immediate action by disconnecting from the network. A detailed investigation revealed that from March 2 to March 5, 2024, the intruder had access to certain systems and successfully extracted data.
The data compromised in this breach included:
Following the discovery of the breach, Affiliated Dermatologists acted swiftly to secure their systems and mitigate any potential damage. They engaged legal counsel and cybersecurity experts to conduct a thorough forensic investigation to understand the scope and impact of the breach. The company has since enhanced their security measures, including implementing 24/7 network monitoring, multi-factor authentication for remote access, and mandatory password resets for all accounts.
As part of their commitment to their patients and employees' security, Affiliated Dermatologists is offering free credit monitoring and identity theft protection services through Cyberscout, a TransUnion company. These services are designed to alert individuals to changes in their credit file and provide assistance in the event of identity theft.
If you believe your information may have been compromised in this breach, it is crucial to stay vigilant and proactive in monitoring your financial accounts and personal information for any unusual activity. Here are some steps you can take:
For further assistance or to ask questions regarding the incident, you can contact Affiliated Dermatologists directly at 1-833-549-9899, available Monday through Friday from 8:00 am to 8:00 pm Eastern Time.
For more information on the breach, you can view the official disclosures on the Texas Attorney General's website and the Massachusetts Attorney General's website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.