Independent Optometry Chain Hit By Employee Email Breach

Exploit
Credential Compromise
Organization
Oregon Eye Specialists
Industry
Healthcare, Optometry

 

On August 10, 2021, independent eyecare provider, Oregon Eye Specialists discovered “unusual activity in an email account,” and was forced to reset the account’s login credentials as well as “implementing additional security measures to further protect information.” Further investigations concluded unauthorized third-party activity among several employee accounts between June 29, 2021, and August 31, 2021.

Two months after the breach was discovered, the independent chain of six clinics has begun to notify potentially affected individuals as they recently posted a notification of the incident on their website. The company says, they have found “no evidence to suggest actual or attempted misuse of information” which could include customer names, dates of birth, medical record numbers, financial account information, and health insurance provider names and/or policy numbers.

The company is warning potentially affected individuals to remain vigilant and continue to monitor accounts for any signs of fraud or identity theft.

Sources