HackingStolen CredentialsTargetedPHIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The Center for Advanced Eye Care
bd_22d99fb77fd66de0 · schema v1 · pii pii-v1
Full breach record for The Center for Advanced Eye Care →The Center for Advanced Eye Care notified consumers of a data security incident discovered on December 16, 2025, involving unauthorized access to legacy systems containing PHI and personal information. The Practice engaged a third-party forensic firm, secured the environment, and is offering credit monitoring and fraud assistance to affected individuals.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7e831a6129cad9bbHHS OCRfiled 2026-02-20Verified
- bd_08b67fc72f162d1dIndiana State AGfiled 2026-02-19(1d gap)Candidate
- bd_53ef02114fbdbda2Delaware State AGfiled 2026-02-19(1d gap)Verified
- bd_59e817da002f0eb9Indiana State AGfiled 2026-02-19(1d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-02-20-center-advanced-eye-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2026
- Raw hash
- 24b9c80180f3b00a9c0bf22ec16a9fb4a3edc608d918463d77385da611fde030
Reporting entity
- Name
- The Center for Advanced Eye Carenorm: the center for advanced eye care
Victim entity
- Name
- The Center for Advanced Eye Carenorm: the center for advanced eye care
Incident
- Discovered
- Dec 16, 2025
- Materiality determined
- —
- Notification sent
- Feb 19, 2026
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.