Frank Eye Center, P.A.

Frank Eye Center, P.A. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-04-29. 2 Massachusetts residents were affected. The report records the breach type as electronic.

Frank Eye Center, P.A. notified the NH Attorney General of a data security incident involving its third-party EMR vendor, Eye Care Leaders (ECL). On Dec 4, 2021, an unknown attacker accessed ECL's backend and deleted information. On Mar 1, 2022, ECL notified Frank Eye Center that unauthorized access to PHI/PII could not be ruled out. Two NH residents were affected. Data included names, addresses, DOBs, SSNs, and medical records. Frank Eye Center is transitioning to a new EMR provider and offering credit monitoring.

Frank Eye Center, P.A. notified patients that its third-party vendor, Eye Care Leaders (ECL), experienced a cybersecurity incident on December 4, 2021. An unknown third party accessed ECL's network and may have deleted files from the myCare Integrity EMR system. The incident may have involved unauthorized access to patient names, addresses, phone numbers, dates of birth, Social Security numbers, and medical treatment/diagnosis information. ECL contained the incident, notified law enforcement, and engaged experts. Frank Eye Center is offering one year of complimentary credit monitoring.

Frank Eye Center, P.A. reported to HHS on 2022-04-29 a Hacking/IT Incident affecting 26,333 individuals. Breached information located on Electronic Medical Record. The business associate was the victim of a cyber-attack compromising PHI including names, SSNs, DOBs, diagnoses, and medications. CE provided credit monitoring and ceased relationship with BA.

FRANK EYE CENTER filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-298). The register records the breach as discovered on December 6, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.