Anne Arundel Dermatology $2.4M Data Breach Settlement

Individuals who provided personal information to Anne Arundel Dermatology P.A. or whose personal information Anne Arundel Dermatology collected, received or possessed personal information on or before Dec. 9, 2025, may be eligible to claim up to $5,000 or a pro rata cash payment from a class action settlement. The cybersecurity incident impacted an estimated 1.9 million current and former patients and other individuals.

Anne Arundel Dermatology P.A. agreed to pay $2.4 million to settle a class action lawsuit related to a data breach that occurred between Feb. 14, 2025, and May 13, 2025. The plaintiffs claimed Anne Arundel Dermatology failed to adequately protect patient data, resulting in unauthorized access to personal and health information.

Who can file a claim for a data breach payout?

Class members are individuals in the United States who provided information, including personally identifiable information or protected health information, to Anne Arundel Dermatology on or before Dec. 9, 2025. This includes individuals whose personal information the company collected, received or possessed on or before the same date.

How much can class members get?

Class members have the following benefit options:

• Cash payment A – Documented out-of-pocket losses: Class members can claim up to $5,000 in unreimbursed expenses resulting from the data breach. Eligible expenses include unreimbursed losses due to fraud or identity theft; bank fees; professional fees, such as those for attorneys' or credit repair services; costs to freeze or unfreeze credit; credit monitoring costs; and miscellaneous expenses.
• Cash payment B – Alternative pro rata cash payment: Class members who do not claim out-of-pocket losses may submit a claim to receive a pro rata cash payment estimated at $100. The settlement administrator will determine the final payment amount by the number of claims filed.
• Medical data monitoring services: All class members can elect to receive three years of CyEx Medical Shield Complete. Services include real-time credit monitoring, dark web scanning, public record monitoring, medical record monitoring, health insurance and beneficiary identifier monitoring, health savings account monitoring, identity theft insurance up to $1,000,000 and access to fraud resolution agents

How to claim a data breach settlement payment

To claim a settlement payment, class members can file a claim online or print the PDF claim form to complete and mail to the settlement administrator.

Settlement administrator's mailing address: AAD Settlement Administrator, P.O. Box 1788, Baton Rouge, LA 70821

The claim deadline is July 8, 2026.

Required proof and claim information

• Online claims require the settlement claim ID from the settlement notice.
• Documented out-of-pocket losses claims require supporting documentation, which may include receipts, invoices, bank or credit card statements showing fees or unreimbursed fraudulent charges, police reports and other proof of fraud or identity theft.

Payout options

• Electronic payment
• Paper check mailed to the address provided

$2.4 million settlement fund

The $2,400,000 settlement fund will include:

• Settlement administration costs: Up to $800,000
• Attorneys' fees: To be determined
• Attorneys' expenses: To be presented to the court for approval at a later date
• Service awards to class representatives: $1,500 each
• Medical data monitoring: Cost determined by number of claims filed
• Payments to approved claimants: Remaining settlement funds

Important dates

• Deadline to opt out: June 9, 2026
• Deadline to file a claim: July 8, 2026
• Fairness hearing: July 16, 2026

When is the Anne Arundel Dermatology data breach settlement payout date?

The settlement administrator will issue payments and medical monitoring activation codes to approved claimants approximately 90 days after the court grants final approval of the settlement.

Why did this class action settlement happen?

This class action lawsuit alleged unauthorized third parties accessed certain Anne Arundel Dermatology systems between Feb. 14, 2025, and May 13, 2025, potentially exposing patients’ personal and health information. The plaintiffs claimed negligent data security practices and intentional disclosure of information.

Anne Arundel Dermatology denied the allegations but agreed to settle to avoid the expense and risk of continued litigation and a possible trial.

Sources

1. Settlement website and FAQ
2. Class notice
3. Claim form
4. Settlement agreement