GEORGIAHackingHealthcareHealthcareStolen CredentialsCapture App DataBusiness Associate (HIPAA)Customer Data InvolvedDelayed DiscoveryHealth (basic)Identity (basic)MediumResolved

EyeSouth Partners

bd_2ac35869d673d54b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 25, 2018

Filed

Jan 23, 2019

To disclose

13 weeks

Affected

24,113

Confidence

96%

Full breach record for EyeSouth Partners →

EyeSouth Partners (GA), acting as business associate for Cobb Eye Center, South Georgia Eye Partners, Georgia Eye Associates, and Georgia Ophthalmology, reported to HHS on 2019-01-23 a Hacking/IT Incident affecting 24,113 individuals. An unauthorized third party accessed an employee's email account from September 11 through October 25, 2018. Forensic investigation (completed December 19, 2018) identified four email attachments containing PHI including demographic and claims information. Remediation included MFA, password reset, spam/malware filtering, and HIPAA training. OCR investigation found gaps in regular HIPAA training and obtained corrective action assurances.

J jump to incidentP pin to compareR raw source

HIPAA clockDiscovered Oct 25, 2018 → Notified Jan 23, 2019✓ HHS notified13 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 44 days

discovery → filing · 13 weeks / 90 days

Sep 11, 2018

Begins

Oct 25, 2018

Discovered

Dec 19, 2018

Scope determined

Jan 23, 2019

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed24,113 affectedView incident

Name: EyeSouth Partners
norm: eyesouth partners
Industry: Business Associate

Name: EyeSouth Partners
norm: eyesouth partners
Industry: Business Associate
Industry: Healthcaresource default

Discovered: Oct 25, 2018
Breach occurred: Sep 11, 2018 – Oct 25, 2018
Undetected for: 44 daysoccurrence → discovery
Materiality determined: Dec 19, 2018
Notification sent: Jan 23, 2019
Affected individuals: 24,113nationwide
Data types: Health (basic)Identity (basic)
HHS breach type: Hacking / IT incident
Where the data lived: Email
Covered-entity type: Business associate
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email CollectionT1566 Phishing
Threat actor: External
Regulator citations: OCR investigation conducted; OCR provided technical assistance regarding HIPAA training responsibilitiesOCR obtained assurances that corrective actions were implemented

During the incident: Changed the compromised employee's email account password
Quarantined the employee's computer
Reviewed all parts of the computer server accessible by the employee's computer
Implemented dual-factor authentication
Deployed new software for spam filtering and malware protection
Reset controls on email tenant
Improved safeguards for logins to email accounts
Provided HIPAA training to all employees
Designated an employee responsible for ensuring ongoing HIPAA training compliance
Changes made: Dual-factor authentication implemented on email accounts
Spam filtering and anti-malware software deployed
Email tenant controls reset
All employees completed HIPAA training in 2018
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(90 days from discovery to filing)
Compliance flags: HHS notified
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
HIPAA
Discovered: Oct 25, 2018
→ Notified: Jan 23, 2019
— regulatory submission HHS notified

Statute	Window	Elapsed	Threshold	Status
HIPAA	Discovered: Oct 25, 2018 → Notified: Jan 23, 2019	—	regulatory submission	HHS notified

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Jan 23, 2019
Raw hash: 1f5c089ebe631a4466f1fdc0ee19ca4a67ea5d0d268c6303aa1dc9160ae198dc

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html2.7 KB

Download View at source

Reporting entityEyeSouth Partners

Victim entityEyeSouth Partners

Incidentdiscovered Oct 25, 2018

Stated responseChanged the compromised employee's email account password

ComplianceHHS notified

Extraction provenanceno artifact recorded

Source provenanceocrportal.hhs.gov

Source filing