New Age Dermatology LLC Discloses Data Breach Followng Ransomware Attack

On Dec. 30, 2025, New Age Dermatology LLC discovered a cybersecurity incident involving ransomware that directly impacted its internal server. The breach was detected by the practice, which immediately took steps to secure its systems and limit further exposure.

According to the notice filed with the Massachusetts Office of Consumer Affairs and Business Regulation, the affected server became inoperable and inaccessible following the attack, and an investigation was launched with the help of cybersecurity professionals. Law enforcement was also notified.

At this time, there is no evidence that the electronic health record system was compromised. However, the investigation has not yet determined exactly what information may have been accessed for each individual.

The potentially exposed data includes both personally identifiable information (PII) and protected health information (PHI), such as name, date of birth, Social Security number, medical or treatment information, diagnostic images, and photographs.

The breach affected at least 29 Massachusetts residents, but the total number of individuals impacted across all states has not been disclosed.

New Age Dermatology LLC's response

To support those affected, New Age Dermatology LLC is offering identity theft protection services through IDX, a company specializing in data breach and recovery services. Impacted individuals are eligible for 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services. These resources are designed to help detect and resolve any issues related to identity theft resulting from the breach.

Individuals whose data may have been exposed are encouraged to enroll in the free identity protection services provided by IDX. They should remain vigilant by reviewing account statements and monitoring their credit reports for suspicious activity. Additional steps such as placing a fraud alert or security freeze with the major credit bureaus are also recommended.