Compton Eye Care Optometry notified the California AG of a ransomware attack on its cloud provider, DataHEALTH, Inc., on November 3, 2021. The attacker accessed data via a third-party software vulnerability. Personal information, including names and potentially PHI, was compromised. DataHEALTH contained the incident, engaged forensics, notified the FBI, and offered one year of identity monitoring via Kroll.