HackingHealthcareHealthcareData EncryptedGovernment IDHealth (basic)Identity (basic)HighContained

20/20 Hearing Care Network, Inc.

bd_c00f9dc616f62ecf · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 11, 2021

Filed

May 28, 2021

To disclose

20 weeks

Affected

1,823state residents only

Linked

2 filings

Confidence

65%

Full breach record for 20/20 Hearing Care Network, Inc. →

20/20 Hearing Care Network, Inc. notified South Carolina and Rhode Island residents of a security incident on January 11, 2021, where an unknown person accessed their system and deleted files. Personal information including SSNs, DOBs, and PHI may have been viewed. The FBI is investigating. The company reset passwords and offered credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due20 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 20 weeks / 137 days

Jan 11, 2021

Discovered

May 28, 2021

Filed

vs. sector median

+10 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_c86b6b692bcc29ae2021-05-29 · +1dVerified

Name: 20/20 Hearing Care Network, Inc.
norm: 20 20 hearing care network

Name: 20/20 Hearing Care Network, Inc.
norm: 20 20 hearing care network
Industry: Healthcarellm

Discovered: Jan 11, 2021
Materiality determined: —
Notification sent: Apr 21, 2021
Affected individuals: 1,823state-resident count only
Data types: Government IDHealth (basic)Identity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Telling the FBI about the problem. They are investigating it.

During the incident: Looked into what caused this incident to occur
Resetting passwords
Telling the FBI about the problem
Sending letters to everyone whose information may be involved
Reviewed and started making our policies and procedures stronger
Changes made: Taken steps to reduce the risk this will happen again
Reviewed and started making our policies and procedures stronger
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

South Carolina State AGMay 28 · first · this page

California State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/2020EyeCare.PDF
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2021
Raw hash: 359d518343d18c16756d1b5690932e333912dbaeee3b4223682654e972a50e94

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entity20/20 Hearing Care Network, Inc.

Victim entity20/20 Hearing Care Network, Inc.

Incidentdiscovered Jan 11, 2021

Stated responseLooked into what caused this incident to occur

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov