HackingHealthcareHealthcareStolen CredentialsCustomer Data InvolvedIdentity (basic)PIIMediumContained

20/20 Eye Care Network, Inc.

bd_db7b677bd69195a0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2021

Filed

Jul 2, 2021

To disclose

25 weeks

Affected

1,244state residents only

Linked

11 filings

Confidence

65%

Full breach record for 20/20 Eye Care Network, Inc. →

20/20 Eye Care Network Inc. notified South Carolina residents of a privacy incident on January 11, 2021, where an unauthorized person accessed and deleted health information including names. The company reset passwords, added safeguards, and provided free credit monitoring and fraud assistance to affected individuals.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due25 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 25 weeks / 172 days

Jan 11, 2021

Discovered

Jul 2, 2021

Filed

vs. sector median

+14 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Montana State AGbd_60245b1be3e833f92021-07-02Verified
New Hampshire State AGbd_232984d9108ab72f2021-06-04 · +28dVerified
Maine State AGbd_451a74de081d12c42021-05-29 · +34dVerified
Massachusetts State AGbd_52c12bc9f098f8472021-05-29 · +34dVerified

Show 6 more filings ↓up to 182d gap

Oregon State AGbd_fc5c1fc79de4f9c42021-05-29 · +34dVerified
Washington State AGbd_5cacb88e66397a5d2021-05-28 · +35dVerified
Indiana State AGbd_eae660bff2eb33ff2021-05-28 · +35dVerified
HHS OCRbd_83930658f85a5fee2021-05-24 · +39dVerified
Illinois State AGbd_7124a9d2a49149492021-01-01 · +182dCandidate
Illinois State AGbd_d44e6e822cf8ab5d2021-01-01 · +182dVerified

Name: 20/20 Eye Care Network, Inc.
norm: 20 20 eye care network
Domain: our2020.com

Name: 20/20 Eye Care Network, Inc.
norm: 20 20 eye care network
Domain: our2020.com
Industry: Healthcarellm

Discovered: Jan 11, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 1,244state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Taken steps to reduce the risk of this happening again
Resetting passwords
Adding additional safeguards to ensure our systems are safe and secure
Providing access to single bureau credit monitoring services at no charge
Providing proactive fraud assistance
Providing a $1,000,000 insurance reimbursement policy
Changes made: Resetting passwords
Adding additional safeguards to ensure our systems are safe and secure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(172 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Illinois State AGJan 1 · first

HHS OCR+143d

Washington State AG+147d

Indiana State AG+147d

Maine State AG+148d

Massachusetts State AG+148d

Oregon State AG+148d

New Hampshire State AG+154d

Montana State AG+182d

South Carolina State AG+182d · this page

Pattern: first filing Jan 1 (IL), last Jul 2 (SC) — a 182-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/United%20Healthcare.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 2, 2021
Raw hash: e439a0609e00366a13249d4dc6fdd3a0d47dcc9703f2d1af4c8ba569d863972d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entity20/20 Eye Care Network, Inc.

Victim entity20/20 Eye Care Network, Inc.

Incidentdiscovered Jan 11, 2021

Stated responseTaken steps to reduce the risk of this happening again

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov