MalwareRansomwareSupply Chain (3P Vendor)Data EncryptedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASICMediumContained
Pioneer Valley Ophthalmic Consultants, PC
bd_1d56e6a2db4b4736 · schema v1 · pii pii-v1
Full breach record for Pioneer Valley Ophthalmic Consultants, PC →Pioneer Valley Ophthalmic Consultants, PC disclosed a third-party vendor breach involving Alta Medical Management. A malware attack on AMM's billing servers (Nov 2021) and unauthorized access to an online patient portal (Oct 2021) potentially exposed patient names, SSNs, payment card info, and medical records. PVOC offered 12 months of credit monitoring. No specific victim count was disclosed.
Vermont clock✗ VT AG >45 bday15 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_d09209cda06f2c25Montana State AGfiled 2023-05-22Verified
- bd_7b723d47816a115aHHS OCRfiled 2023-05-26(4d gap)Verified
- bd_4b18c4c790d90963New Hampshire State AGfiled 2023-05-31(9d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-05-22-pioneer-valley-ophthalmic-consultants-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2023
- Raw hash
- 3b9223204385500dbf94642fa8f464729f71afb8195412631e5c83ac814d0a42
Reporting entity
- Name
- Pioneer Valley Ophthalmic Consultants, PCnorm: pioneer valley ophthalmic consultants
Victim entity
- Name
- Pioneer Valley Ophthalmic Consultants, PCnorm: pioneer valley ophthalmic consultants
Incident
- Discovered
- Mar 3, 2022
- Materiality determined
- May 22, 2023
- Notification sent
- May 22, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notifying government regulators, as required
- Third party
- via Alta Medical Management and ECL Group, LLC
- Initial access
- supply_chain
Compliance
- Time to disclose
- 15 months(445 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.