The known extent of a data security incident in the eyecare industry continues to expand.
Health IT Security reports that the incident is now known to have affected 16 organizations and more than 583,700 individuals.
The breach took place in December, with affected practices being notified on March 1.
These are the practices that have reported the data breach to the U.S. Office for Civil Rights:
- Ad Astra Eye
- Allied Eye Physicians and Surgeons
- Arkfeld, Parson, and Goldstein, P.C. doing business as ilumin
- Associated Ophthalmologists of Kansas City
- AU Health
- Burman & Zuckerbrod Ophthalmology Associates
- EvergreenHealth
- Finkelstein Eye Associates
- Fishman Vision
- Frank Eye Center
- Moyes Eye Center
- Northern Eye Care Associates
- Regional Eye Associates
- Shoreline Eye Group
- Summit Eye Associates
- Sylvester Eye Care
As of May 26 it was known that at least eight organizations and 342,000 individuals were affected.
EvergreenHealth stated in a notice on its website: “Although Eye Care Leaders has not confirmed that any EvergreenHealth patient information was accessed as a result of the incident, they have informed EvergreenHealth that they cannot rule out that possibility. This information may have included patient names, dates of birth, medical record numbers, and information regarding care received at EvergreenHealth Eye Care Clinic.”