Harvard Eye Associates

HARVARD EYE ASSOCIATES reported to HHS on 2021-02-08 a Hacking/IT Incident affecting 29,982 individuals. Breached information located on Network Server. The incident involved a business associate cyber-attack exposing ePHI including names, addresses, DOB, and health insurance data. The covered entity provided credit monitoring and implemented additional technical safeguards.

Affected (this filing): 29,982

Harvard Eye Associates notified patients and employees of a data breach involving a third-party online data storage vendor. Hackers accessed the vendor's system as early as October 24, 2020; the vendor discovered the intrusion and notified Harvard Eye on January 15, 2021. The hackers demanded ransom; the vendor paid and the data was returned. Compromised data included patient PHI, employee PII (SSNs, bank account numbers, government IDs), and affiliated individuals' information. IDX identity protection services were offered.