Forefront reports that they had identified an intrusion into their system that exposed 4,431 patients data they took their system offline to prevent further spread or damage. Subsequent investigation revealed that there had been unauthorized access to some of its patient files and employee files. The patient files that were accessed may have included patient names, addresses, dates of birth, patient account numbers, health insurance plan member ID numbers, medical record numbers, dates of service, accession numbers, provider names, and/or medical and clinical treatment information. There were no evidence that patient Social Security numbers, driver’s license numbers, or financial account / payment card information were involved in this incident.

Forefront Dermatology reached a $3.75 settlement to resolve a class action lawsuit stemming from a May 2021 healthcare data breach. The breach impacted more than 2.4 million individuals. An unauthorized party accessed Forefront Dermatology’s IT network. Files compromised contained names, birth dates, patient account numbers, addresses, dates of service, provider names, medical treatment information, and medical record numbers. Impacted patients and employees were harmed in the form of the loss of the benefit of their bargain, out-of-pocket expenses, loss of privacy, and loss of the value of their time reasonably incurred to remedy or to mitigate the effects of the attack.