HackingHealthcareHealthcareStolen CredentialsData MishandlingData DestroyedCustomer Data InvolvedDelayed DiscoveryPHIGovernment IDIdentity (basic)Health (basic)MediumActive

20/20 Eye Care Network, Inc.

bd_232984d9108ab72f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2021

Filed

Jun 4, 2021

To disclose

21 weeks

Affected

148state residents only

Linked

11 filings

Confidence

66%

Full breach record for 20/20 Eye Care Network, Inc. →

20/20 Eye Care Network, Inc. experienced unauthorized access to its AWS environment on January 11, 2021, where an unknown party deleted data from S3 buckets. The incident potentially affected 148 New Hampshire residents, exposing PHI including SSNs, names, DOBs, and health insurance info. The company notified the FBI and HHS, engaged forensics, and is offering 12 months of credit monitoring. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 144 days

Jan 11, 2021

Begins

Jan 11, 2021

Discovered

Jun 4, 2021

Filed

vs. sector median

+10 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Maine State AGbd_451a74de081d12c42021-05-29 · +6dVerified
Massachusetts State AGbd_52c12bc9f098f8472021-05-29 · +6dVerified
Oregon State AGbd_fc5c1fc79de4f9c42021-05-29 · +6dVerified
Washington State AGbd_5cacb88e66397a5d2021-05-28 · +7dVerified

Show 6 more filings ↓up to 154d gap

Indiana State AGbd_eae660bff2eb33ff2021-05-28 · +7dVerified
HHS OCRbd_83930658f85a5fee2021-05-24 · +11dVerified
Montana State AGbd_60245b1be3e833f92021-07-02 · +28dVerified
South Carolina State AGbd_db7b677bd69195a02021-07-02 · +28dVerified
Illinois State AGbd_7124a9d2a49149492021-01-01 · +154dCandidate
Illinois State AGbd_d44e6e822cf8ab5d2021-01-01 · +154dVerified

Name: 20/20 Eye Care Network, Inc.
norm: 20 20 eye care network
Domain: our2020.com

Name: 20/20 Eye Care Network, Inc.
norm: 20 20 eye care network
Domain: our2020.com
Industry: Healthcarellm

Discovered: Jan 11, 2021
Breach occurred: Jan 11, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 28, 2021
Affected individuals: 148state-resident count only
Data types: PHIGovernment IDIdentity (basic)Health (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1485 Data Destruction
Threat actor: External
Regulator citations: Notified the FBINotified the U.S. Department of Health and Human ServicesNotified other relevant state regulators
Initial access: valid_credentials

During the incident: Reviewed and deactivated/reset access credentials to the AWS environment
Implemented other responsive security measures
Notified the FBI
Engaged a cybersecurity firm to look into the incident
Conducted an exhaustive review to determine what specific data may be at risk
Notified individuals and relevant regulators
Providing access to credit monitoring services for twelve (12) months, through TransUnion
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Notified the U.S. Department of Health and Human Services
Changes made: Implementing additional safeguards and training to its employees
Resetting passwords
Reviewed and started making policies and procedures stronger
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(144 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Illinois State AGJan 1 · first

HHS OCR+143d

Washington State AG+147d

Indiana State AG+147d

Maine State AG+148d

Massachusetts State AG+148d

Oregon State AG+148d

New Hampshire State AG+154d · this page

Montana State AG+182d

South Carolina State AG+182d

Pattern: first filing Jan 1 (IL), last Jul 2 (SC) — a 182-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/2020-eye-care-network-20210604.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 4, 2021
Raw hash: 05b19a40eb48790ca6f73b88d950b70dc14d942f3a6da1ca099a241c209dc59d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entity20/20 Eye Care Network, Inc.

Victim entity20/20 Eye Care Network, Inc.

Incidentdiscovered Jan 11, 2021

Stated responseReviewed and deactivated/reset access credentials to the AWS environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov