Anne Arundel Dermatology PA: Dermatology Clinics’ $2.4 Million Breach Deal Gets Initial Nod

Anne Arundel Dermatology Settles $2.4M Class Action Over 2025 Data Breach

Anne Arundel Dermatology PA, a Maryland-based healthcare provider, has agreed to a $2.4 million settlement in a proposed class action lawsuit alleging negligence in protecting the personal data of over 1.9 million individuals exposed in a 2025 breach. The deal, granted preliminary approval by U.S. District Court Judge George L. Russell III, resolves claims that the company failed to implement adequate security measures to prevent the incident.

Under the settlement terms, affected individuals classified as "class members" may receive up to $5,000 in compensation for documented out-of-pocket losses tied to the breach. Alternatively, they can opt for a $100 cash payment. The breach, which compromised sensitive personal information, has raised concerns about healthcare data security and the financial repercussions of inadequate cybersecurity protocols.

The case underscores the growing legal and financial risks organizations face following data breaches, particularly in the healthcare sector, where regulatory scrutiny and class action litigation are increasingly common. The settlement awaits final court approval.

Source: https://news.bloomberglaw.com/privacy-and-data-security/dermatology-clinics-2-4-million-breach-deal-gets-initial-nod

Anne Arundel Dermatology cybersecurity rating report: https://www.rankiteo.com/company/annearundeldermatology

"id": "ANN1772217469",
"linkid": "annearundeldermatology",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '1.9 million individuals',
                        'industry': 'Healthcare',
                        'location': 'Maryland, USA',
                        'name': 'Anne Arundel Dermatology PA',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'Affected individuals may receive up to $5,000 in '
                        'compensation for documented out-of-pocket losses or '
                        'opt for a $100 cash payment.',
 'data_breach': {'number_of_records_exposed': '1.9 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Sensitive personal information'},
 'date_publicly_disclosed': '2025',
 'description': 'Anne Arundel Dermatology PA has agreed to a $2.4 million '
                'settlement in a proposed class action lawsuit alleging '
                'negligence in protecting the personal data of over 1.9 '
                'million individuals exposed in a 2025 breach. The breach '
                'compromised sensitive personal information, raising concerns '
                'about healthcare data security and financial repercussions of '
                'inadequate cybersecurity protocols.',
 'impact': {'brand_reputation_impact': 'Raised concerns about healthcare data '
                                       'security',
            'data_compromised': 'Sensitive personal information',
            'financial_loss': '$2.4 million settlement',
            'legal_liabilities': 'Class action lawsuit'},
 'investigation_status': 'Settlement granted preliminary approval',
 'lessons_learned': 'The case underscores the growing legal and financial '
                    'risks organizations face following data breaches, '
                    'particularly in the healthcare sector, where regulatory '
                    'scrutiny and class action litigation are increasingly '
                    'common.',
 'post_incident_analysis': {'root_causes': 'Failure to implement adequate '
                                           'security measures'},
 'references': [{'source': 'U.S. District Court (Judge George L. Russell '
                           'III)'}],
 'regulatory_compliance': {'legal_actions': 'Class action lawsuit'},
 'title': 'Anne Arundel Dermatology Data Breach Class Action Settlement',
 'type': 'Data Breach'}