Skin Center Data Breach Lawsuit: A Ransomware Claim, Not a Case
Reference Guide
The “skin center data breach” in the news is a claim, not a confirmed breach. On October 16, 2026 a ransomware group listed Skin Center, a dermatology clinic in Fort Lauderdale, Florida, on its leak site. As of October 17, 2026 the clinic has not confirmed anything, no notice letters have gone out, and we found no lawsuit. If you are a Brevard Skin & Cancer Center patient, that is a different case — with a real settlement and a November 16, 2026 claim deadline.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Has Actually Been Claimed
Skin Center is a dermatology practice in Fort Lauderdale with a second office in Pompano Beach. A ransomware tracker that indexes criminal leak sites recorded the clinic as a victim of a group called The Gentlemen. It was discovered on October 16, 2026, with an estimated attack date of October 14, 2026.
That is the attackers’ own claim. It is not a confirmation. A law-firm listing site, ClassAction.org, says attorneys are “investigating claims” and lists the affected data as “TBD”. The same group has been named in recent weeks against other small medical practices, including an eye clinic in Mississippi and a dental office in Virginia.
The tracker describes Skin Center as owned since 2021 by Forefront Dermatology, a national practice network. We could not confirm that independently. It matters because Forefront itself was hit by ransomware in 2021 — a separate, closed case covered below.
Case details
No lawsuit found against Skin Center. As of October 17, 2026 we found no federal case over this incident. Our search of federal court feeds turned up only unrelated businesses with “Skin Center” in their names. We did not search Florida state courts case by case, and a state-court filing could appear before any federal one.
For comparison, the closest Florida case is In Re: Brevard Skin & Cancer Center Data Breach Litigation, Case No. 05-2025-CA-054649-XXCA-BC, in the Circuit Court for Brevard County. The first suit there was filed on October 20, 2025, six days after the practice spotted the intrusion. Earlier, Forefront’s 2021 breach led to Anderson v. Forefront Dermatology SC, No. 1:21-cv-00891 in the Eastern District of Wisconsin, before Judge Lynn S. Adelman. That case was closed on March 22, 2023.
Status: Unconfirmed, No Lawsuit, No Settlement
We tried to load skincenter.com on October 17, 2026 and it did not respond, so we could not check it for an incident notice.
The next real milestone is a notice letter. Federal health privacy rules generally require one when patient data is confirmed exposed. Lawsuits over medical-practice breaches often follow public disclosure; in the Brevard case the first suit came six days after the practice spotted the intrusion.
Could You Be Affected?
If the claim is confirmed, the people at risk would be Skin Center patients and possibly staff. Nobody can tell you yet whose records, if any, were taken — the affected data is listed as “TBD”.
Watch your mail. If your data was involved, the notice should come from Skin Center or from Forefront Dermatology. Keep the letter and the envelope; it states which fields were in your record.
If you were treated at Brevard Skin & Cancer Center in Brevard County, you are in a different situation. That practice reported a September 2025 breach affecting 54,570 people, and its settlement is open for claims until November 16, 2026.
What You Could Get — and Where Money Exists Today
Brevard Skin & Cancer Center is different. That settlement offers up to $2,500 for documented, unreimbursed losses, or a one-time $45 cash payment instead. Every class member can also claim one year of CyEx Medical Shield Complete medical data monitoring. The deadline to opt out or object is November 2, 2026. The deadline to claim is November 16, 2026. The final approval hearing is set for November 30, 2026, and no money is paid before the court approves.
For a sense of what a larger dermatology breach paid: Forefront’s 2021 case, covering up to 2.4 million people, produced a proposed $3.75 million settlement offering up to $10,000 for documented losses (we could not confirm final approval). Try our data breach settlement calculator for typical ranges.
Skin Center Data Breach Timeline
2021 — Forefront Dermatology Ransomware Attack
Forefront Dermatology, which the tracker names as Skin Center’s owner, detects a ransomware attack on June 4. Up to 2.4 million employees and patients are affected.
March 22, 2023 — Forefront Case Closed
The Wisconsin class action over the 2021 breach (No. 1:21-cv-00891), in which Forefront had proposed a $3.75 million settlement, is closed.
October 14, 2026 — Estimated Attack Date
The date a ransomware tracker gives as the estimated attack on Skin Center. It is reported, not confirmed.
October 16, 2026 — Leak-Site Listing
Skin Center appears as a victim of the group The Gentlemen. A law-firm listing site posts an investigation, with affected data marked TBD.
November 16, 2026 — Brevard Claim Deadline
A separate case: the last day for Brevard Skin & Cancer Center patients to file a claim. The final approval hearing follows on November 30, 2026.
Next — Confirmation or Notice Letters
As of October 17, 2026, Skin Center has confirmed nothing. Notice letters, a regulator filing and any lawsuit would come after that.
Three Things to Watch For
An unconfirmed claim against a medical practice is exactly the gap scammers fill:
“Skin Center settlement” claim pages
There is no Skin Center settlement and no claim form. A site asking for your Social Security number or date of birth to “check if you qualify” is collecting data, not filing anything.
Extortion emails quoting your appointment
If records were stolen, criminals sometimes contact patients directly and threaten to publish treatment or cosmetic-procedure details unless they pay. Do not pay or reply; report it to the FBI’s IC3 and keep the message.
Mixing up the Brevard settlement
The Brevard Skin & Cancer Center settlement is real but covers only that practice’s patients. File only through the official site, brevardskindatasettlement.com, and only if your notice says you are a class member.
Skin Center Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Skin Center data breach lawsuit?
Not that we could find as of October 17, 2026. Attorneys are “investigating” after a ransomware group claimed the clinic on October 16, 2026. An investigation means lawyers are looking for clients; it is not a filed case.
Did Skin Center confirm the data breach?
No. As of October 17, 2026 there is no confirmation, no notice letter, and no report to HHS or a state attorney general that we could find. The only source is the attackers’ leak-site posting.
What data was taken?
Unknown. The law-firm listing marks the affected data as “TBD”. A dermatology practice typically holds names, dates of birth, insurance details and treatment records, but nothing has been confirmed for Skin Center.
Is there a payout, and when?
Not for Skin Center — there is no settlement and no payout date. If you meant Brevard Skin & Cancer Center, claims there are due November 16, 2026, and no money is paid unless the court approves the settlement.
Can you sue a hospital for a data breach?
Patients do sue medical providers over breaches, usually for negligence. The Brevard Skin & Cancer Center case shows the path: breach found October 14, 2025, first suit filed October 20, 2025, consolidated February 5, 2026, settlement in 2026. Whether a suit succeeds depends on what was taken and what harm can be shown.
Is this the QualDerm data breach?
No. QualDerm Partners is a management company for 158 dermatology and skin care practices in 17 states. Its December 23–24, 2025 breach was reported to HHS as 3,117,874 people, later reduced to 2,951,318. Skin Center is a separate, more recent claim.
What skincare brand is being sued?
That is a different kind of case. The one in the news is the Neutrogena Skin360 face-scan settlement in Illinois — see our Neutrogena Skin360 settlement update for the claim deadline and estimate. It has nothing to do with Skin Center.
Is ClassAction.org a legitimate website, and what should I do now?
It is a real site, but its breach listings are run to find clients for law firms. A listing is not a lawsuit or a settlement. For now: keep an eye on your mail, read your insurer’s explanation-of-benefits statements for care you never had, and consider a free credit freeze.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements taking claims now, with deadlines
- Data Breach Settlement CalculatorWhat breach settlements typically pay per person
- Desert Orthopaedic Center BreachAnother medical-practice breach with no lawsuit found yet
- Settlement Payout CalculatorEstimate a per-person payout from fund size and claims