U.S.Vision, Inc.,

U.S. Vision, Inc. reported that an unauthorized individual accessed its network between April 20 and May 17, 2021, with discovery occurring on May 12, 2021. The incident potentially exposed personal identifying information, vision care/treatment records (PHI), insurance information, and billing data. The company engaged third-party cybersecurity specialists, conducted a comprehensive file review, and assessed system security. No specific malware or threat actor was identified.