A ransomware group claims it breached Skin Center, a Fort Lauderdale dermatology clinic, though the clinic has not confirmed the incident or disclosed what data was involved. The affected patient population and specific data types remain unknown. Anyone who has visited Skin Center should monitor their credit reports and watch for suspicious communications as a precaution.
| Company | Skin Center |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Not Publicly Disclosed |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Skin Center Data Breach?
A ransomware group has posted a claim online stating it breached Skin Center, a dermatology clinic in Fort Lauderdale, Florida. The claim appeared on a dark web leak site tied to the group. As of now, Skin Center has not publicly confirmed the incident.
Because this is an unconfirmed claim, many basic facts remain unknown. The breach discovery date has not been publicly disclosed. Similarly, no notification date has been shared with the public or with affected individuals, as far as current records show.
Ransomware groups often post these claims to pressure a victim into paying before any encryption or theft is independently verified. As a result, it is important to treat this report as an allegation rather than an established fact. No independent forensic report has been made available to confirm what, if anything, was actually accessed.
Skin Center operates as part of a larger dermatology network, which acquired it in 2021. That corporate structure means billing and records systems may be shared across many clinic locations. However, the source material does not indicate whether other clinics in the network were affected by this specific claim.
Who was affected?
If the ransomware group’s claim is accurate, patients of Skin Center could be affected. The clinic serves a large patient base, reportedly seeing more than 200 patients per day across its Fort Lauderdale and Pompano Beach offices. This suggests a sizable pool of people could have records on file.
The exact number of affected individuals has not been publicly disclosed. In addition, it is not yet clear whether the claim involves current patients only, former patients, employees, or some combination of these groups. Because dermatology practices often treat patients across all age groups, the possibility that minors’ records are involved cannot be ruled out, though this has not been confirmed.
Given the clinic’s decades of operation and its ownership by a larger healthcare network, the potential scope of affected records could extend beyond the local practice’s own files. Still, without official confirmation, readers should treat any estimate of affected individuals as speculative.
What Information Was Potentially Exposed?
The specific types of information involved in this claimed incident have not been publicly disclosed. The ransomware group’s posting does not detail which data categories, if any, were taken from Skin Center’s systems.
Because no data types have been confirmed, it would be misleading to list specific categories such as medical records or financial details as exposed in this incident. Readers should understand that any such claim would be speculation rather than fact at this time.
That said, healthcare providers typically maintain sensitive administrative and clinical records as part of normal operations. If a breach is eventually confirmed, the risk to affected individuals would depend heavily on which data categories were actually involved. For example, exposure of identity or financial details generally creates a higher risk of fraud than exposure of appointment scheduling information alone.
Until Skin Center or investigators release more specific findings, affected individuals cannot know for certain whether their personal details were part of this claimed breach. Nonetheless, because medical practices often hold data that could support identity theft if compromised, caution is reasonable even while facts remain unverified. Monitoring accounts and staying alert to unusual communications is a sensible precaution regardless of the claim’s eventual outcome.
What is the company doing?
Skin Center has not publicly confirmed this breach claim. As a result, there is no public record of an investigation, remediation effort, or notification campaign tied to this specific incident.
Because the clinic has not issued a statement, it is not possible to describe what protective steps, if any, have been taken on behalf of patients. If Skin Center later confirms the incident, additional details about its response would typically follow, including any notification letters or protective service offers.
In the meantime, affected individuals should not assume that credit monitoring or other protections have already been arranged. Instead, they should watch for official communication directly from Skin Center or its parent healthcare network. Official notices would usually arrive by mail or email and would specify what, if anything, was exposed.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Even though this claim remains unconfirmed, it is wise for anyone who has visited Skin Center to check their credit reports periodically. You can request a free copy from each of the three major credit bureaus once a year through AnnualCreditReport.com.
Reviewing these reports lets you spot unfamiliar accounts or inquiries early. If you notice anything suspicious, you can dispute it quickly, which limits potential damage. Because fraud can take time to surface, continuing to check periodically over the coming months is a good habit.
Watch for Phishing Attempts
Scammers sometimes use breach claims, confirmed or not, as cover to send fake emails or texts pretending to be from the breached organization. Therefore, be cautious of any message asking you to click a link or provide personal details related to Skin Center.
Instead of clicking links in unexpected messages, contact Skin Center directly using a phone number or website you find independently. This way, you avoid accidentally giving information to a scammer impersonating the clinic.
Consider a Fraud Alert if You Have Concerns
If you are especially concerned about identity theft, you can place a free fraud alert with one of the three credit bureaus, which then notifies the other two. This makes it harder for someone to open new credit in your name without extra verification.
A fraud alert typically lasts one year and can be renewed. For stronger protection, you could also consider a credit freeze, which restricts access to your credit file entirely until you lift it. Both options are free and reversible.
Keep Records and Stay Informed
Because this incident is still unconfirmed, it is worth saving any communication you receive from Skin Center or its parent network going forward. Keeping a file of dates, letters, and emails can help if you need to prove a connection to this incident later.
In addition, staying informed through reliable updates can help you act quickly if the claim is confirmed. If you later learn your information was involved, consulting a data breach attorney for a free case evaluation can help you understand your options, including whether a class action may apply.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.