RANDLEMAN, NC — Randleman Eye Center in North Carolina reports that it was the victim of a malware attack.
The practice states in a press release that it “is taking action after becoming aware of an incident in which some of our systems were accessed by an unauthorized person.”
“While there is no evidence that suggests that any data was actually taken, we have notified individuals for whom we have contact information if their information may have been affected,” the practice explains.
The attack took place starting on or around Jan. 10, and the practice became aware of it on Jan. 13.
The practice states: “This malware encrypted certain files, including on a server that contained patient protected health information. The affected data may include first and last name, date of birth, gender, and digital retinal images. There is currently no evidence that suggests this malware incident actually resulted in the acquisition of any personal information beyond its encryption, but that possibility cannot be conclusively ruled out.”
Randleman Eye Center states that it has been working to contain the malware and has engaged a third-party forensics firm to investigate the scope and source of the incident.
Advertisement
“We continue to work on ways to mitigate the risk of future such incidents,” the practice states. “Out of an abundance of caution, we are providing patients that may have been affected by this incident with one year of credit monitoring services at no cost to them.”
Randleman Eye Center adds: “We encourage our patients to remain vigilant over the coming months and regularly review their bank and other financial account statements, as well as their credit report. Patients that have any reason to believe that they may be the victim of identity theft, or notice any suspicious activity on any of their accounts, should immediately notify the relevant institution, their local law enforcement agency, their state’s Attorney General, and the Federal Trade Commission.”
