Fishman Vision Notifies Patients of Third-Party Data Security Incident
Fishman Vision has become aware of a third party data security incident that may have resulted in unauthorized access to the sensitive personal information of some of our patients. In 2021, Fishman Vision was using the electronic medical records platform “myCare Integrity,” which was provided by the practice performance company Eye Care Leaders (“ECL”). This incident has affected eye care practices across the country, and is not specific to Fishman Vision. There is no evidence of any attempted or actual misuse of any personal information. However, out of an abundance of caution, Fishman Vision is notifying, via mail, any patient whose information may have been stored on the myCare Integrity system at the time of a data security incident, and providing resources to help protect potentially affected individuals. This data security incident occurred entirely within Eye Care Leaders’ network environment, and there were no other remedial actions available to Fishman Vision. Fishman Vision has since terminated its vendor relationship with Eye Care Leaders.
According to Eye Care Leaders, on or around December 4, 2021, an unauthorized party accessed myCare Integrity data and deleted databases and system configuration files. According to Eye Care Leaders, upon identifying the activity, Eye Care Leaders’ incident response team immediately stopped the unauthorized access and began investigating the incident. Notably, there was no evidence that this incident involved unauthorized access to any of Fishman Vision’s patient records.
However, a lack of available forensic evidence prevented Eye Care Leaders from ruling out the possibility that some protected health information and personally identifiable information may have been exposed to the bad actor. As stated above, there was no evidence that this information was actually accessed by the bad actor.
As of this writing, Fishman Vision has not received any reports of identity theft related to this incident. However, in the interest of complete transparency, the information present during the period of unauthorized access may have included our patients’ name, address, date of birth, social security number, diagnostic information, and health insurance information.
Fishman Vision is providing a toll free number, 1 (855) 503-3403, Monday through Friday 9:00 a.m. to 6:30 p.m. Eastern Time, excluding all major U.S. Holidays., if any current or former patients have questions.
Fishman Vision sincerely regrets any inconvenience or concern that this matter may cause, and remains dedicated to ensuring the privacy and security of all information in our control.