HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Alabama Ophthalmology Associates
bd_ba02658c7e2a5075 · schema v1 · pii pii-v1
Full breach record for Alabama Ophthalmology Associates →Alabama Ophthalmology Associates notified consumers of a data breach occurring between Jan 22-30, 2025. Unusual network activity was detected on Jan 30. Potentially affected data includes names, DOBs, SSNs/gov IDs, and health/diagnosis info. The entity engaged cybersecurity experts, enhanced network security, contacted law enforcement, and is offering 12/24 months of credit monitoring and identity protection via IDX.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by bianlian about this victim predates this filing by 76 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_96d0378c765266caLeak Sitebianlianfiled 2025-02-19(47d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-08-alabama-ophthalmology-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2025
- Raw hash
- 7a4d8196510153502da83518a43a4c59d27301e3a91618675e0321a4a13c2136
Reporting entity
- Name
- Alabama Ophthalmology Associatesnorm: alabama ophthalmology associates
- Domain
- aoapc.com
Victim entity
- Name
- Alabama Ophthalmology Associatesnorm: alabama ophthalmology associates
- Domain
- aoapc.com
Incident
- Discovered
- Jan 30, 2025
- Materiality determined
- —
- Notification sent
- Apr 7, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Contacted law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.