HackingHealthcareHealthcareCustomer Data InvolvedDelayed DiscoveryPIIPHIIdentity (basic)LowContained

Vitreo-Retinal Medical Group, Inc.

bd_01dee6b79d97e9ea · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 9, 2021

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for Vitreo-Retinal Medical Group, Inc. →2 incidents on file

On July 12, 2021, Vitreo-Retinal Medical Group, Inc. d/b/a Retinal Consultants Medical Group and Northern California Advanced Surgery Center, LP experienced a service disruption caused by a sophisticated cyberattack. It could not be confirmed which files or folders were accessed without authorization. The organization notified potentially affected individuals by late October 2021 after a detailed review of potentially accessed data. Affected individuals were offered complimentary credit monitoring through TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 12, 2021

Begins

Nov 9, 2021

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_582f7ae1bff9f1a32021-11-09Verified
HHS OCRbd_b5ff48c2004bbab42021-11-09Verified

Name: Vitreo-Retinal Medical Group, Inc.
norm: vitreo retinal medical

Name: Vitreo-Retinal Medical Group, Inc.
norm: vitreo retinal medical
Also named: Vitreo-Retinal Medical Group, Inc.dba oflegal entity
Retinal Consultants Medical Groupdba oftrade name
Industry: Healthcarellm

Discovered: —
Breach occurred: Jul 12, 2021
Materiality determined: —
Notification sent: Oct 25, 2021
Affected individuals: Not disclosed
Data types: PIIPHIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Launched an investigation working with outside cybersecurity specialists to securely restore our systems
Resetting relevant account passwords
Reviewing the contents of the potentially accessed files and folders to determine whether they contained sensitive information
Offering complimentary credit monitoring and identity protection services through TransUnion
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Montana State AGNov 9 · first

HHS OCRNov 9 · first

California State AGNov 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-547374
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 9, 2021
Raw hash: 29c36415efe6d646b49782dccf7feb7903528b998b3bdf06b650aaa73e07baa5

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityVitreo-Retinal Medical Group, Inc.

Victim entityVitreo-Retinal Medical Group, Inc.

IncidentUnauthorized Access

Stated responseLaunched an investigation working with outside cybersecurity specialists to securely restore our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov