On March 17, 2023, Associates in Dermatology (“AID”) filed a notice of data breach with the U.S. Department of Health and Human Services Office for Civil Rights. Evidently, the stemmed from a ransomware attack targeting Virtual Private Network Solutions, LLC (“VPN Solutions”), an AID vendor that provides the company with electronic health record management software. Based on third-party reports, the incident resulted in an unauthorized party gaining access to consumers’ names, addresses, Social Security numbers, dates of birth, and protected health information. After confirming that consumer data was leaked, AID began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.
If you received a data breach notification from Associates in Dermatology or Virtual Private Network Solutions, LLC, it is essential you understand what is at risk and what you can do about it. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the Associates in Dermatology / Virtual Private Network Solutions, LLC data breach, please see our recent piece on the topic here.
What We Know So Far About the VPN Solutions Breach
The available information regarding the Associates in Dermatology breach comes from the company’s filing with the U.S. Department of Health and Human Services Office for Civil Rights, as well as news reports covering the incident. According to these sources, on around October 31, 2021, VPN solutions discovered a network security incident affecting its computer system. In response, the company launched an investigation into the incident in hopes of learning more about the incident and what, if any, confidential consumer data was leaked. Initially, VPN Solutions informed AID that no patient data was affected by the ransomware attack.
However, through its investigation, VPN was able to determine that the unauthorized actor who orchestrated the ransomware attack was able to access certain files on the company’s network that contained confidential consumer data. On January 17, 2023, VPN then informed AID that some patient data was leaked as a result of the incident.
Upon discovering that sensitive consumer data was made available to an unauthorized party, Associates in Dermatology began to review the affected files to determine what information was compromised and which consumers were impacted. AID completed this process on March 10, 2023. While the breached information varies depending on the individual, it may include your name, address, Social Security number, date of birth, and protected health information.
On March 17, 2023, Associates in Dermatology sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.
More Information About Associates in Dermatology
Founded in 2017, Associates in Dermatology is a healthcare provider located in Hampton, Virginia. The practice operates 11 locations, including in Kentucky: Louisville – Springhurst, Louisville – Audubon, Fern Creek, Shelbyville, Bardstown, Lebanon, Leitchfield, Elizabethtown, Clarksville, and Campbellsville. AID also has a clinic in New Albany, Indiana. Associates in Dermatology employs more than 40 people, including 18 physicians.
