EyeSouth Partners
bd_2ac35869d673d54b · schema v1 · pii pii-v1
Full breach record for EyeSouth Partners →EyeSouth Partners (GA), acting as business associate for Cobb Eye Center, South Georgia Eye Partners, Georgia Eye Associates, and Georgia Ophthalmology, reported to HHS on 2019-01-23 a Hacking/IT Incident affecting 24,113 individuals. An unauthorized third party accessed an employee's email account from September 11 through October 25, 2018. Forensic investigation (completed December 19, 2018) identified four email attachments containing PHI including demographic and claims information. Remediation included MFA, password reset, spam/malware filtering, and HIPAA training. OCR investigation found gaps in regular HIPAA training and obtained corrective action assurances.
Source provenance
- Source URL
- https://ocrportal.hhs.gov/ocr/breach/breach_report.jsf
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jan 23, 2019
- Raw hash
- 1f5c089ebe631a4466f1fdc0ee19ca4a67ea5d0d268c6303aa1dc9160ae198dc
Source filing
Reporting entity
- Name
- EyeSouth Partnersnorm: eyesouth partners
- Industry
- Business Associate
Victim entity
- Name
- EyeSouth Partnersnorm: eyesouth partners
- Industry
- Business Associate
- Industry
- Healthcaresource default
Incident
- Discovered
- Oct 25, 2018
- Materiality determined
- Dec 19, 2018
- Notification sent
- Jan 23, 2019
- Affected individuals
- 24,113
- Data types
- HEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email CollectionT1566 Phishing
- Threat actor
- External
- Regulator citations
- OCR investigation conducted; OCR provided technical assistance regarding HIPAA training responsibilitiesOCR obtained assurances that corrective actions were implemented
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- HIPAA 60-day late · 90dHHS notified · 90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status HIPAA Discovered: Oct 25, 2018→ Notified: Jan 23, 201990d 60 days HIPAA 60-day late HIPAA Discovered: Oct 25, 2018→ Notified: Jan 23, 201990d regulatory submission HHS notified
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.