On Feb. 26, 2025, Keys Dermatology and its management company, DermCare Management, discovered suspicious activity on their computer systems. An investigation was launched and on March 3, 2025 it was determined that a cybercriminal may have copied certain patient information from the network without permission.
The data breach may have exposed both personally identifiable information (PII) and protected health information (PHI). The total number of patients affected has not been released but the cybersecurity incident involves several dermatology practices in multiple states.
Compromised information may include names, Social Security numbers, driver's license number, medical records, health insurance information and financial information. Keys Dermatology published an updated Notice of Security Event on it's website on May 2, 2025.
Keys Dermatology and DermCare Management are working to identify and notify impacted individuals by mail. A dedicated assistance line has been set up for patients with questions at 833-998-7517, Monday through Friday from 9am to 5pm EST.
If you receive a notice from Keys Dermatology or DermCare Management about this breach, you may want to:
More information about the healthcare organization can be found on the Keys Dermatology website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.