Shelby Dermatology Data Breach Affects 86,414 Patients

Shelby Dermatology, PC has experienced a sizable data breach, which was discovered on March 7, 2025. The cybersecurity incident affected a reported 86,414 individuals across the United States, and includes both personally identifiable information (PII) and protected health information (PHI).

The breach was disclosed to the U.S. Department of Health and Human Services on May 2, 2025 and to the Massachusetts Attorney General's office on June 4, 2025, reporting two Massachusetts residents affected. Dermatologists of Birmingham posted a Notice of Data Event on its own website on June 4, 2025.

Compromised data may include names, addresses, dates of birth, email addresses, phone numbers, Social Security numbers, health insurance information, and medical diagnoses and treatment information.

Shelby Dermatology's response

In response to the breach, Shelby Dermatology, PC has taken steps to notify affected individuals and regulatory authorities as required by law. Affected Individuals are being notified by mail.

If you received notification from Shelby Dermatology, you may want to:

• Sign up for the 12 months of free credit monitoring and identity theft restoration services through Transunion, paid for by Shelby Dermatology.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

Dermatologists of Birmingham has set up a dedicated assistance line at 1-833-998-9347 between the hours of 8:00 a.m. to 8:00 p.m. Eastern time, Monday through Friday.

For more information about Shelby Dermatology, visit the company’s website.