MalwareHealthcareHealthcareRansomwareData EncryptedTargetedIdentity (basic)Health (basic)LowContained

Victoria Eye Center

bd_9bb67aa48e32e3a8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 21, 2024

Filed

May 29, 2024

To disclose

10 weeks

Affected

10state residents only

Linked

5 filings

Confidence

65%

Full breach record for Victoria Eye Center →

Victoria Eye Center reported a ransomware incident on March 21, 2024, where malicious file encryption rendered computer systems inaccessible. An unknown actor accessed limited systems and files containing names, addresses, and medical IDs. The company engaged forensic specialists, restored systems, and offered 12 months of identity theft protection via IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 69 days

Mar 21, 2024

Discovered

May 29, 2024

Filed

vs. sector median

1 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_f74fe512065162222024-05-28 · +1dVerified
Montana State AGbd_99d506f349edab142024-05-22 · +7dVerified
Maine State AGbd_d2a33fb92e57c7792024-05-21 · +8dVerified
HHS OCRbd_6128a9e2d2639a692024-05-17 · +12dVerified

Name: Victoria Eye Center
norm: victoria eye center

Name: Victoria Eye Center
norm: victoria eye center
Industry: Healthcarellm

Discovered: Mar 21, 2024
Materiality determined: —
Notification sent: May 13, 2024
Affected individuals: 10state-resident count only
Data types: Identity (basic)Health (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Launched an extensive investigation, aided by third party computer forensic specialists
Secure our systems, restore access to the information
Offering identity theft protection services through IDX, A ZeroFox Company
Changes made: Reviewed our internal data management and protocols
Implemented enhanced security measures to help prevent this type of incident from recurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

HHS OCRMay 17 · first

Maine State AG+4d

Montana State AG+5d

New Hampshire State AG+11d

South Carolina State AG+12d · this page

Pattern: first filing May 17 (TX), last May 29 (SC) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2024/VictoriaEyeCenter.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2024
Raw hash: 3f39378f5a8bf17acbf706d67bc4a91db34e1af9db89d2e722ba0fad2dae6fe5

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityVictoria Eye Center

Victim entityVictoria Eye Center

Incidentdiscovered Mar 21, 2024

Stated responseLaunched an extensive investigation, aided by third party computer forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov