Southern Illinois Dermatology, a medical and cosmetic dermatology practice, experienced a data breach that was disclosed in early 2026. The incident involved unauthorized access to its IT systems, discovered on December 28, 2025. The company posted an official notification on its website and began mailing letters to affected individuals on March 15, 2026.
The breach affected approximately 45,000 individuals. The exposed data types include names, addresses, dates of birth, medical information (including treatment history and diagnoses), health insurance details, and Social Security numbers (SSNs). Financial account numbers were not confirmed as exposed. The breach appears to be a direct compromise of the provider's systems, not a vendor breach.
Details about data breaches can emerge over time, and notification processes may be delayed.