OVER 3.1 million people were affected by a December 2025 data breach at QualDerm Partners, with personal, medical and health insurance information exposed. The company said it detected unauthorized activity on 24 December 2025, after uncovering access to a limited number of systems between 23 December and 24 December 2025 and later removed certain information from those systems.
The breach prompted a forensic investigation and the company is notifying potentially affected individuals, offering 12 months of free identity theft and credit monitoring services. Stolen information varied by person and could include names, dates of birth, medical records, treatments, diagnoses, health insurance details and, in rare cases, government IDs like driver’s licences. According to US Department of Health and Human Services, the data breach impacted 3,117,874 people. The notice includes a quoted statement from the company about containment steps and ongoing investigation with a third-party forensics firm.