Aesthetic Dermatology Associates

Profile narrative

Aesthetic Dermatology Associates, also known as ADA Dermatology, is a dermatology practice headquartered in the United States of America. As indicated by its name, the organization focuses on aesthetic dermatology, offering medical and cosmetic skin care services to patients. In the course of providing care, the practice collects and manages protected health information, including personal identifiers and clinical details. Handling such information places the entity under the regulatory framework of the Health Insurance Portability and Accountability Act (HIPAA). The organization operates within the U.S. healthcare sector, serving individuals seeking dermatologic evaluation and treatment.

On August 15, 2022, Aesthetic Dermatology Associates experienced a cybersecurity breach involving unauthorized access to its network systems. The intrusion compromised sensitive patient data, comprising names, addresses, dates of birth, diagnosis codes, and health insurance details. The BianLian ransomware group claimed responsibility for the attack and subsequently leaked the stolen records on the dark web. The organization confirmed that the breach affected over thirty‑three thousand individuals. In accordance with federal requirements, the entity reported the incident to the U.S. Department of Health and Human Services. Despite this regulatory reporting, the organization did not disclose the existence of the dark web leak in its public notifications to patients. No evidence of resulting data misuse was acknowledged by the practice in its communications. Furthermore, the organization did not offer complimentary credit‑monitoring or identity‑theft mitigation services to those impacted. Details of the incident were later covered by a data‑breach news outlet, highlighting the gap between official reporting and patient‑facing transparency. The event underscores the growing threat of ransomware to healthcare entities that store valuable personal health information.

Incidents

1 incident linked to this organisation.