Visionworks of America, Inc.

Visionworks Inc. (TX) reported to HHS on 2014-11-10 the loss of a partially encrypted, decommissioned network server from its in-store lab in Annapolis, Maryland, which was not recovered. The server's hard drive contained unencrypted PHI — including demographic, financial, and clinical information — of approximately 74,000 individuals. Remediation included full server encryption company-wide, physical security improvements, workforce retraining, a system disposal plan, and credit monitoring offered to affected individuals. OCR investigation completed.

Affected (this filing): 74,944