MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Government IDPHIMediumContained

Barrett Eye Care

bd_0ee1c25a4fad20f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 2, 2024

Filed

Jul 22, 2024

To disclose

7 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Barrett Eye Care →

Barrett Eye Care notified patients of a June 2, 2024 security incident where a threat actor gained unauthorized access to systems, locking the organization out. Personal information including names, addresses, driver's license numbers, and health insurance info was exposed. The incident was contained, law enforcement was notified, and forensic experts were engaged.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 7 weeks / 50 days

Jun 2, 2024

Begins

Jun 2, 2024

Discovered

Jul 22, 2024

Filed

vs. sector median

5 wks faster

This filing is one of 4 about the same incident.View merged incident

A leak claim by dragonforce about this victim predates this filing by 43 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedragonforcebd_e8cee579d471009c2024-06-08 · +43dVerified

Regulatory filings (2) · sorted by filing gap

HHS OCRbd_7a29a59ecc94deb92024-07-19 · +3dVerified
Indiana State AGbd_eb5fd00cc9f980d62024-07-19 · +3dVerified

Name: Barrett Eye Care
norm: barrett eye care
Domain: barretteyecare.com

Name: Barrett Eye Care
norm: barrett eye care
Domain: barretteyecare.com
Industry: Healthcarellm

Discovered: Jun 2, 2024
Breach occurred: Jun 2, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 19, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Took immediate measures to contain and neutralize the vulnerability
Secured the IT environment
Notified law enforcement
Initiated a forensic investigation
Deployed additional security procedures
Engaged cyber security experts
Changes made: Continue to deploy additional security procedures
Strengthen internal controls and safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

HHS OCRJul 19 · first

Indiana State AGJul 19 · first

South Carolina State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2024/BarrettEyeCare.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2024
Raw hash: ab7b371796829a8ae94b93e04ba26ffbe2f69ca126a219ea516cebbf239b1e0c

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityBarrett Eye Care

Victim entityBarrett Eye Care

Incidentdiscovered Jun 2, 2024

Stated responseTook immediate measures to contain and neutralize the vulnerability

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov