Notice of Data Security Incident involving Colorado Residents who Received Care at a MyEyeDr. Location between December 1 and December 10, 2019

Vision Care Specialists P.C. was recently acquired and is part of MyEyeDr. Optometry of Colorado P.C. (MyEyeDr.).  This asset purchase occurred on October 11, 2019.  MyEyeDr. is a network of vision care offices that provides vision health services, including eye care and exams, fashion frames, and specialty lenses, and maintains information related to those services. This notice describes a ransomware attack that may have involved the personal and protected health information of MyEyeDr. patients who received services between December 1 and December 10, 2019, measures we have taken, and some steps that you might take in response.

On December 11, 2019, an unauthorized party accessed some of MyEyeDr.’s information systems and entered ransomware into our systems that encrypted records on MyEyeDr.’s systems. MyEyeDr. quickly engaged a leading computer forensics firm, launched an investigation and began recovery efforts to restore the encrypted records. The investigation revealed that information in MyEyeDr.’s systems was only encrypted. There was no evidence that any information was exported from MyEyeDr.’s systems or released to the public or third parties. MyEyeDr. was able to restore the majority of the information, however, there were some records that could not be restored and remain encrypted.  

MyEyeDr. conducted a comprehensive review of the types of information in the records that could not be restored. The types of information may vary by individual, but includes patients’ names, dates of birth, diagnoses, and clinical and treatment information.

MyEyeDr. began mailing notification letters to potentially affected individuals on February 7, 2020.  If you believe you may have been affected by this ransomware attack and have questions about your personal information, you may contact MyEyeDr. by phone at 703-847-8899 (TTY: 711) or email at privacy@myeyedr.com.

MyEyeDr. takes the responsibility to protect the personal and health information of its patients seriously and regret any inconvenience or concern this may cause. 

 

Today’s Vision Willowbrook Notice Regarding Unsecure Paper Record Disposal

Willowbook, TX – Today’s Vision Willowbrook, which was acquired by Capital Vision Services, LLC (d/b/a MyEyeDr.) in February, 2019, learned that on or about May 21, 2019, limited records for historical patients of Today’s Vision Willowbrook were placed in an unsecure dumpster near Tomball, Texas. 

The media reported this event and law enforcement responded by immediately seizing the paper records and placing them in a secure police facility. 

The records related to a limited number of historical patients seen by Today’s Vision Willowbrook between 1997-2013.  The kinds of information contained in these historical patients’ records included one or more of the following: first and last names, addresses, dates of birth, social security numbers, clinical information and billing information.

Immediately after discovering the issue, MyEyeDr. investigated the event.  MyEyeDr. has cooperated with state and Federal authorities throughout the process. Based on the prompt action of the Tomball police in securing the records, there is no indication that any unauthorized third parties had or will have an opportunity to misuse any of the patient information contained in the records at issue.  Further, the records at issue were never in the custody of MyEyeDr., and the investigation revealed no evidence that the records were placed in the dumpster by any personnel of MyEyeDr. or Today’s Vision Willowbrook.

MyEyeDr takes this situation seriously and is committed to protecting the privacy of patients. MyEyeDr is taking reasonable steps to provide all potentially impacted individuals with notice of the event.

MyEyeDr. has also reported the breach to the Department of Health and Human Services Office for Civil Rights as required by federal breach notification laws.

We apologize for any inconvenience here.  Again, our primary concern is to make sure that you have complete information about this event including the fact that we are taking all necessary actions to protect your privacy.

If you have any questions, please do not hesitate to contact our office at 703.847.8899 or you can send an email to privacy@myeyedr.com.