Anne Arundel Dermatology (AAD) has notified patients that an unauthorized third party gained access to certain of its computer systems. The company says the intrusion may have begun on February 14, 2025 and continued until May 13, 2025, when it was identified and contained. After discovering the incident, AAD worked with third-party experts to review what happened, confirmed the systems had been secured, and later determined that some of the data files the intruder could access contained personal or health information belonging to patients.
The letter is addressed to individuals whose personal or health information was found in the files accessed during this window. AAD has not said how many people in total were notified, and the letter does not list the exact categories of information involved for every recipient, instead referring to a variable field meant to be filled in per patient. AAD states it is not aware of any actual misuse of anyone’s information as a result of this incident, but is notifying people as a precaution.
What information was exposed?
- Personal information — the specific data elements are not spelled out in the general notice text
- Health information — the specific data elements are not spelled out in the general notice text
As a precaution, AAD is offering complimentary identity theft protection through IDX, which includes 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services. To enroll, call 1-855-202-7980, go to https://response.idx.us/AAD, or scan the QR code in the letter and use the Enrollment Code provided. The enrollment deadline is October 14, 2025.
What should you do now?
- Enroll in the free IDX identity protection offer before the October 14, 2025 deadline, and make sure to activate the credit monitoring component once you sign up, since it does not turn on automatically.
- Because health information may have been involved, watch for unfamiliar medical bills, insurance statements, or explanation-of-benefits notices that don’t match care you actually received.
- Request and review your free credit reports at annualcreditreport.com, and look for accounts or inquiries you don’t recognize.
- Consider placing a credit freeze with Equifax, Experian, and TransUnion, which prevents new credit from being opened in your name without a PIN.
- Consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere, such as being sold or traded online.
- Report any signs of fraud or identity theft to your state Attorney General, local law enforcement, and the Federal Trade Commission at ftc.gov/idtheft.
If you have questions, Anne Arundel Dermatology can be reached at 1-855-202-7980 or https://response.idx.us/AAD, or by writing to 1306 Concourse Drive, #201, Linthicum Heights, MD 21090.