DermCare Management reports massive data breach affecting over 1.3 million patients
A Florida-based business associate, DermCare Management, filed a report with HHS OCR on May 2, 2025, disclosing a significant security incident. The filing identifies a hacking/IT incident involving a network server that compromised the protected health information of 1,361,735 individuals. Because DermCare is a business associate, this breach likely impacts the healthcare providers and health plans that rely on its services. Administrators should verify if their organization contracts with DermCare and review their business associate agreements to understand notification obligations and risk mitigation steps. This filing date reflects when the report was submitted to the regulator, not necessarily when the breach occurred or was discovered.