HackingVulnerability ExploitData ExfiltratedData EncryptedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Allied Eye Physicians & Surgeons, Inc.
bd_e9c52b90b9f440eb · schema v1 · pii pii-v1
Full breach record for Allied Eye Physicians & Surgeons, Inc. →Allied Eye Physicians & Surgeons, Inc. reported a cybersecurity incident involving its third-party vendor, Eye Care Leaders (ECL). On December 4, 2021, an unknown attacker accessed ECL's myCare Integrity EMR system, deleted files, and potentially accessed patient data including names, SSNs, and medical records. Six New Hampshire residents were affected. ECL contained the breach, restored data from backups, and notified law enforcement. Allied Eye notified the affected individuals and offered one year of credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c99945069bd97938Maine State AGfiled 2022-04-27(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/allied-eye-physicians-surgeons-20220428.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 28, 2022
- Raw hash
- b389e0b84086e02d11d427c9f665f19d792c424ba1181d6f33fdbe8d000daa26
Reporting entity
- Name
- Allied Eye Physicians & Surgeons, Inc.norm: allied eye physicians surgeons
Victim entity
- Name
- Allied Eye Physicians & Surgeons, Inc.norm: allied eye physicians surgeons
Incident
- Discovered
- Dec 4, 2021
- Materiality determined
- —
- Notification sent
- Apr 27, 2022
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
- Threat actor
- External
- Third party
- via Eye Care Leaders
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(145 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.