A Maryland-based dermatology practice and a Virginia-based medical imaging and radiology entity have each reported to federal regulators separate hacking incidents that affected the protected health information of more than 3.3 million patients.
As of Thursday, each of the hacks – reported by Anne Arundel Dermatology and Radiology Associates of Richmond – ranked among the five largest health data breaches posted so far in 2025 on the U.S. of Department of Health and Human Services’ HIPAA Breach Reporting Tool website listing health data breaches affecting 500 or more individuals.
Annapolis, Md.-based Anne Arundel Dermatology, which on its website lists more than 100 patient care locations in seven states, reported to HHS’ Office for Civil Rights on July 11 that its hacking incident involved a network server and potentially compromised the PHI of 1.9 million people, the fourth-largest health data breach in 2025…