QualDerm Partners Data Breach Investigation
Chimicles Schwartz Kriner & Donaldson-Smith LLP (CSK&D) is investigating potential class action claims related to a reported data breach involving QualDerm Partners, LLC. The incident has potentially compromised highly sensitive personal and protected health information of current and former patients across 17 states, including at least 174,837 individuals in Texas alone.
What Happened at QualDerm Partners?
On December 24, 2025, QualDerm detected unauthorized activity on certain systems within its network. A forensic investigation confirmed that an unauthorized actor gained access between December 23, 2025, and December 24, 2025, and removed certain stored information. QualDerm provides business management services to 158 dermatology, skin cancer, plastic surgery, and related practices in 17 states. The company is conducting an ongoing review to identify all affected individuals and is sending notifications accordingly.
What Information Was Compromised?
The compromised data varies by individual but may have been exposed, according to QualDerm’s notice and reports:
- Patient names and dates of birth
- Doctor names and medical record numbers
- Treatment and diagnosis information
- Health insurance information
- Email addresses
- Dates of death (where applicable)
- Government-issued identification information (such as driver’s license numbers), for a limited number of individuals
Why Is This Important?
The exposure of protected health information (PHI) combined with personal identifiers creates a significantly elevated risk of targeted medical identity theft, sophisticated phishing scams impersonating healthcare providers, fraudulent insurance claims, and other forms of fraud. Unlike typical data breaches, the inclusion of treatment details and medical records can enable criminals to craft highly convincing scams or misuse health services in victims’ names.
What Should You Do?
If you are a current or former patient of a QualDerm-affiliated practice (in states including Arizona, Delaware, Minnesota, New Jersey, North Carolina, Tennessee, Texas, and others) and believe you may have been affected—whether or not you’ve received a notification—please contact one of our data breach attorneys by filling out the form below to learn more about your legal rights and potential options.
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.
