HackingHealthcareHealthcareBusiness Associate (HIPAA)Customer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

U.S.Vision, Inc.,

bd_e39c5fc00cafebba · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 12, 2021

Filed

Nov 30, 2022

To disclose

19 months

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for U.S.Vision, Inc., →

U.S. Vision, Inc. experienced unauthorized access to its network between April 20, 2021, and May 17, 2021, discovered on May 12, 2021. An unauthorized individual accessed files containing personal and health information of patients served by Nationwide Optical Group, LLC, for which U.S. Vision acted as a business associate. Affected data may include names, dates of birth, addresses, Social Security numbers, driver's license numbers, financial account information, medical records, and health insurance details. U.S. Vision engaged cybersecurity specialists, conducted dark web monitoring, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 12, 2021 → Notified Oct 28, 2022534d ✗ CA 60-day late19 months discovery → filing

Incident timeline

undetected · 22 days

discovery → filing · 19 months / 567 days

Apr 20, 2021

Begins

May 12, 2021

Discovered

Nov 30, 2022

Filed

vs. sector median

+72 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Delaware State AGbd_8895c6bff85665b82021-09-03 · +453dCandidate
Illinois State AGbd_70ef666ad8956e1e2024-03-01 · +457dVerified by operator
California State AGbd_40755fd7d00dcd242024-03-19 · +475dVerified
Washington State AGbd_6dd0d0cf51cb59a52024-03-20 · +476dVerified

Show 2 more filings ↓up to 477d gap

Oregon State AGbd_9e4a698e2832d9142024-03-20 · +476dVerified
South Carolina State AGbd_3a0aae70628c71dc2024-03-21 · +477dVerified

Name: U.S.Vision, Inc.,
norm: usvision
Domain: usvision.com

Name: U.S.Vision, Inc.,
norm: usvision
Domain: usvision.com
Industry: Healthcarellm

Discovered: May 12, 2021
Breach occurred: Apr 20, 2021 – May 17, 2021
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 28, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Third party: via U.S. Vision, Inc.

During the incident: Launched an investigation into the nature and scope of the incident with the assistance of cybersecurity specialists
Instituted dark web monitoring for any potential data that could have been involved in this incident
Conducted a comprehensive review of the impacted files to determine what information was affected and to whom the information related
Offered credit monitoring and identity restoration services for a period of 12/24 months, at no cost
Changes made: Evaluating opportunities to improve security and to better prevent future events of this kind
Enhanced security controls and monitor systems to ensure no similar activity occurs
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 months(567 days from discovery to filing)
Compliance flags: CA 60-day late · 534d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 12, 2021
→ Notified: Oct 28, 2022
534d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 12, 2021 → Notified: Oct 28, 2022	534d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Delaware State AGSep 3 · first

California State AG+453d · this page

Illinois State AG+910d

California State AG+928d

Washington State AG+929d

Oregon State AG+929d

South Carolina State AG+930d

Pattern: first filing Sep 3 (DE), last Mar 21 (SC) — a 930-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-559594
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2022
Raw hash: 766c8b5f564e7387dc3de9deff3adac25bded676df066b4cbb331ff9c55ed013

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityU.S.Vision, Inc.,

Victim entityU.S.Vision, Inc.,

Incidentdiscovered May 12, 2021

Stated responseLaunched an investigation into the nature and scope of the incident with the assistance of cybersecurity specialists

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov