HackingHealthcareHealthcareData DestroyedCustomer Data InvolvedPHIGovernment IDIdentity (basic)Health (basic)MediumContained

20/20 Hearing Care Network, Inc.

bd_c86b6b692bcc29ae · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2021

Filed

May 29, 2021

To disclose

20 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for 20/20 Hearing Care Network, Inc. →

20/20 Hearing Care Network, Inc. reported that an unknown person accessed its system and deleted files on January 11, 2021. The incident potentially exposed Social Security numbers, member IDs, dates of birth, and health insurance information (PHI) of current and former members. The company engaged a cybersecurity firm, reset passwords, and notified the FBI. Affected individuals were offered 12 months of free credit monitoring and fraud assistance.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 138 days

Jan 11, 2021

Begins

Jan 11, 2021

Discovered

May 29, 2021

Filed

vs. sector median

+11 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

South Carolina State AGbd_c00f9dc616f62ecf2021-05-28 · +1dCandidate

Name: 20/20 Eye Care Network, Inc.
norm: 20 20 eye care network
Domain: our2020.com

Name: 20/20 Hearing Care Network, Inc.
norm: 20 20 hearing care network
Industry: Healthcarellm

Discovered: Jan 11, 2021
Breach occurred: Jan 11, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PHIGovernment IDIdentity (basic)Health (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1485 Data Destruction
Threat actor: External
Regulator citations: Notified the FBI

During the incident: Engaged a cybersecurity firm to investigate the incident
Resetting passwords
Notified the FBI about the problem
Sending letters to everyone whose information may be involved
Reviewed and started making policies and procedures stronger
Changes made: Providing free credit monitoring services for twelve months
Providing proactive fraud assistance
Providing a $1,000,000 insurance reimbursement policy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(138 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

South Carolina State AGMay 28 · first

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-541414
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2021
Raw hash: ee7ea11811d1c58298d832ebb29c5eb19225c0fb1a0ac3c81e39a48e4fa3599b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entity20/20 Eye Care Network, Inc.

Victim entity20/20 Hearing Care Network, Inc.

Incidentdiscovered Jan 11, 2021

Stated responseEngaged a cybersecurity firm to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov