Universal Dermatology Data Breach Affects 35,295 Patients

Universal Dermatology & Vein Care, a medical practice, disclosed a data breach that affected 35,295 individuals in the United States.

The breach was disclosed to the U.S. Department of Health and Human Services on Sept. 30, 2026. The HHS Office for Civil Rights maintains a public breach portal that tracks reports of breaches involving unsecured protected health information under the Health Insurance Portability and Accountability Act, commonly known as HIPAA.

Under federal law, health care providers and other covered entities must report breaches affecting 500 or more individuals to HHS.

The data breach at Universal Dermatology & Vein Care involved the potential exposure of PHI or protected health information. PHI may refer to patient names, contact information, Social Security numbers, financial account information, driver's license numbers, medical record numbers, clinical diagnoses, treatment histories, prescription information, lab test results and imaging records and other information.

At this time, specific details concerning the incident remain undisclosed. As more information is released publicly, this article will be updated.

Universal Dermatology & Vein Care's response to the breach

Individuals who believe they may have been impacted should watch their mail for a notification letter from Universal Dermatology & Vein Care. If the practice is offering credit monitoring, identity protection or other support services, that information would be included in the notification letter.

Additionally, individuals with any questions or concerns about the incident should reach out directly to the company for more information.