QualDerm Data Breach Affects 174,837 in Texas: PHI and PII Exposed

QualDerm Partners, LLC, a healthcare management services organization specializing in dermatology and skin care, recently experienced a data breach impacting the personal and health information of thousands of patients. The incident was discovered on Dec. 24, 2025, after unauthorized activity was detected on certain systems within the company's network.

According to the notice of the breach posted on the company's website, the breach occurred between Dec. 23 and Dec. 24, 2025, and involved an unauthorized actor gaining access to and removing data from a limited number of internal systems.

The breach was the result of a targeted cyberattack, where an unauthorized actor infiltrated QualDerm’s systems and exfiltrated sensitive data over a short period.

The types of information exposed in this incident varied by individual but included both personally identifiable information (PII) and protected health information (PHI): patient name, date of birth, doctor name, medical record number, date of death, email address, treatment information, diagnosis information and health insurance information, and government-issued identification information, such as a driver’s license number.

The breach affected at least 174,837 individuals in Texas alone, as reported to the Texas Attorney General’s office on Feb. 24, 2026.

The full scope of the breach is still being reviewed, but the company has already begun notifying affected individuals.

QualDerm Partners' response

To support those affected, QualDerm is providing complimentary credit monitoring and identity protection services. Impacted individuals are encouraged to remain vigilant by reviewing account statements and Explanation of Benefits forms for suspicious activity.

QualDerm has established a dedicated assistance line at 1-855-522-4707, available Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding holidays.

Given the nature of the breach, affected individuals should:

• Monitor financial and medical accounts for unusual or unauthorized activity
• Take advantage of the free credit monitoring and identity protection services offered
• Report any suspicious activity to the relevant institution or provider