DermCare Management dermcaremanagement.com DermCare Management data breach: what happened and what to do
DermCare Management, which runs dermatology and plastic surgery practices, found suspicious activity on February 26, 2025. Files were taken between February 14 and 26. It identified the people involved in March 2026 and offers free credit monitoring.
View all 13,115 breaches- Breach date
- 14 Feb 2025
- Made public
- 8 Apr 2026
- Last updated
DermCare Management manages dermatology and plastic surgery practices and keeps records for them. It has notified people about a 2025 network intrusion.
What happened
DermCare says it became aware of suspicious activity on its systems on February 26, 2025, and learned on March 3 that patient information could be affected. Its investigators found that certain files were accessed or taken without permission between February 14 and February 26, 2025. Reviewing those files took a long time: it was not until March 2, 2026 that DermCare could identify the people involved and send notices. Letters were filed with state attorneys general, including California and Washington.
What was exposed
The letter says the information includes your name plus other details that differ from person to person. It lists them on your own notice. DermCare has not published a total number of people affected. It says it has no reports of identity theft or fraud tied to the incident.
What the company did
DermCare says it secured its network and strengthened its security. It offers free credit monitoring and identity restoration through Epiq. You need to enroll yourself, and the notice has a deadline, so check your letter.
What to do if you were in it
- 1
Read your letter and enroll in the monitoring
The offer is free but nobody enrolls you. Use the activation code and deadline in your notice.
- 2
Consider a credit freeze
If your letter lists a Social Security number or financial details, freeze your credit at Equifax, Experian and TransUnion. It's free and you can lift it when you need credit.
- 3
Review statements for 12 to 24 months
DermCare recommends reviewing account statements and credit reports. Report anything unfamiliar to your bank or card company.
- 4
Watch for messages about your appointments
Treat unexpected texts, emails or calls about billing or procedures as suspicious. Call the practice using a number you already trust.
- 5
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up, so you know what to act on. It can't remove data from a breach, but it tells you what to do next.
Frequently asked
Was I affected by the DermCare Management breach?
DermCare is sending letters to the people whose data was involved. If you were a patient at a practice it manages and haven't received one, contact the practice.
What data was exposed?
Your name plus other information that varies by person. Your notice letter lists yours.
Is there free credit monitoring?
Yes. DermCare offers credit monitoring and identity restoration through Epiq. You have to enroll by the deadline in your letter.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
