MalwareHealthcareHealthcareRansomwareData EncryptedSupply Chain (3P Vendor)Customer Data InvolvedPHIHealth (basic)Identity (basic)Financial accountMediumContained

Redwood Eye Center

bd_56c0f062ff20d4bb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 20, 2018

Filed

Dec 6, 2018

To disclose

11 weeks

Affected

16,055state residents only

Confidence

66%

Full breach record for Redwood Eye Center →

Redwood Eye Center, an ophthalmology practice in Vallejo, CA, experienced a ransomware attack on its third-party electronic medical records host, IT Lighthouse, on September 19, 2018. The attack encrypted patient records. Redwood discovered the incident on September 20, 2018. Affected data may include names, addresses, dates of birth, health insurance information, and medical treatment information for 16,055 California residents. Redwood retained cybersecurity experts, restored access with vendor assistance, and is changing hosting vendors and enhancing security. Notification letters were mailed on December 6, 2018.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 11 weeks / 77 days

Sep 19, 2018

Begins

Sep 20, 2018

Discovered

Dec 6, 2018

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed16,055 affectedView incident

Name: Redwood Eye Center
norm: redwood eye center
Domain: redwoodeyecenter.com

Name: Redwood Eye Center
norm: redwood eye center
Domain: redwoodeyecenter.com
Industry: Healthcarellm

Discovered: Sep 20, 2018
Breach occurred: Sep 19, 2018 – Sep 19, 2018
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 6, 2018
Affected individuals: 16,055state-resident count only
Data types: PHIHealth (basic)Identity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified California Attorney General
Third party: via IT Lighthouse
Initial access: supply_chain

During the incident: Retained cybersecurity experts to assist
Worked with medical records software vendor to restore access to patient information
Notified affected individuals via first class U.S. mail
Changes made: Changing medical records hosting vendors
Enhancing the security of patient information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(77 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-142414
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 6, 2018
Raw hash: 8de59633013d10129d12f5ad6b1eeabe0ecefbf9223dceff80c2b4b7b5da2c0e

Reporting entityRedwood Eye Center

Victim entityRedwood Eye Center

Incidentdiscovered Sep 20, 2018

Stated responseRetained cybersecurity experts to assist

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov