Spectrum Eye Physicians notified patients of two data breaches involving third-party vendor Eye Care Leaders (ECL). The first involved a vulnerability in the Alta Payment Portal allowing unauthorized access to payment receipts (Oct 2021). The second was a ransomware attack on ECL's myCare Integrity EMR system (Dec 2021) where attackers deleted databases. Spectrum discovered the issues in May 2022. Affected data includes PHI, financial account details, and patient identities. Spectrum terminated contracts with ECL and migrated to new vendors.