HackingData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
River City Eye Care, LLC
bd_20c9e9bdf4da4a5c · schema v1 · pii pii-v1
Full breach record for River City Eye Care, LLC →River City Eye Care, LLC notified Vermont AG of a data breach occurring around September 8, 2025. Unauthorized access resulted in the copying of files containing names and government identifiers. The company engaged federal law enforcement and offered credit monitoring services. Investigation completed October 1, 2025.
Vermont clock⏱ VT AG >14 bday5 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_50780a9a1d815cd1HHS OCRfiled 2025-10-16Candidate
- bd_70f21a3f82ca8bb3Oregon State AGfiled 2025-10-16Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-16-river-city-eye-care-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 16, 2025
- Raw hash
- a621ea6d498f2f3a000ca77dbef6cb59f0903c29ec9cbdcbd0a0b3f1b7934a22
Reporting entity
- Name
- River City Eye Care, LLCnorm: river city eye care
Victim entity
- Name
- River City Eye Care, LLCnorm: river city eye care
Incident
- Discovered
- Sep 8, 2025
- Materiality determined
- —
- Notification sent
- Oct 16, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.