MalwareHealthcareHealthcareRansomwareData EncryptedData ExfiltratedIdentity (basic)Government IDPHIHealth (basic)MediumContained

20/20 Eye Care Network, Inc.

bd_5cacb88e66397a5d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2021

Filed

May 28, 2021

To disclose

20 weeks

Affected

690state residents only

Linked

11 filings

Confidence

71%

Full breach record for 20/20 Eye Care Network, Inc. →

20/20 Eye Care Network, Inc. reported a cyberattack on Jan 11, 2021, involving unauthorized access to its AWS environment. Data was potentially removed and then deleted. Affected data included names, SSNs, DOBs, and PHI. 690 Washington residents were notified on May 28, 2021. The FBI was notified, and credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d20 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 20 weeks / 137 days

Jan 11, 2021

Begins

Jan 11, 2021

Discovered

May 28, 2021

Filed

vs. sector median

+10 wks slower

This filing is one of 11 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_eae660bff2eb33ff2021-05-28Verified
Maine State AGbd_451a74de081d12c42021-05-29 · +1dVerified
Massachusetts State AGbd_52c12bc9f098f8472021-05-29 · +1dVerified
Oregon State AGbd_fc5c1fc79de4f9c42021-05-29 · +1dVerified

Show 6 more filings ↓up to 147d gap

HHS OCRbd_83930658f85a5fee2021-05-24 · +4dVerified
New Hampshire State AGbd_232984d9108ab72f2021-06-04 · +7dVerified
Montana State AGbd_60245b1be3e833f92021-07-02 · +35dVerified
South Carolina State AGbd_db7b677bd69195a02021-07-02 · +35dVerified
Illinois State AGbd_7124a9d2a49149492021-01-01 · +147dCandidate
Illinois State AGbd_d44e6e822cf8ab5d2021-01-01 · +147dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: 20/20 Eye Care Network, Inc.
norm: 20 20 eye care network
Domain: our2020.com
Industry: Healthcarellm

Discovered: Jan 11, 2021
Breach occurred: Jan 11, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 28, 2021
Affected individuals: 690state-resident count only
Data types: Identity (basic)Government IDPHIHealth (basic)
Data elements: NameSocial Security numberDate of birthHealth insurance ID
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the FBINotified the U.S. Department of Health and Human Services
Initial access: valid_credentials

During the incident: Access credentials to the AWS environment were reviewed and deactivated/reset
Promptly notified the FBI
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for twelve (12) months, through TransUnion
Notified the U.S. Department of Health and Human Services
Changes made: Resetting passwords
Reviewed and started making our policies and procedures stronger
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Illinois State AGJan 1 · first

HHS OCR+143d

Indiana State AG+147d

Washington State AG+147d · this page

Maine State AG+148d

Massachusetts State AG+148d

Oregon State AG+148d

New Hampshire State AG+154d

Montana State AG+182d

South Carolina State AG+182d

Pattern: first filing Jan 1 (IL), last Jul 2 (SC) — a 182-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10472.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2021
Raw hash: a53e14e0a71246ee01201d26f5eab3617da199d1ec42d89479e003ec238b1aaa

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entity20/20 Eye Care Network, Inc.

Incidentdiscovered Jan 11, 2021

Stated responseAccess credentials to the AWS environment were reviewed and deactivated/reset

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com