Ransomware Attack on Texas Ophthalmology Practice Exposes Data of 80,000 Patients - Victoria Surgery Center, Victoria Eye Center, and Victoria Vision Center #20739
"A Texas ophthalmology practice has experienced a ransomware attack that resulted in the encryption of files on its computer systems. The attack affected Victoria Surgery Center, Victoria Eye Center, and Victoria Vision Center and involved the personal and protected health information of 80,122 individuals.
The attack was detected on March 21, 2024, when the file encryption made certain computer systems inaccessible. Third-party forensics specialists were engaged to assist with the investigation and help secure systems, restore access to patient information, and determine the extent to which patient information was involved. The investigation confirmed that there had been unauthorized access to systems and that certain files containing patient data were accessed in the attack.
The file review has recently been completed and confirmed that names, addresses, and medical identification were compromised. The affected individuals have now been notified and offered 12 months of credit monitoring and identity theft protection services. Steps have been taken to prevent similar incidents in the future, including reviewing and revising internal data management and protocols and enhancing security measures."
https://www.hipaajournal.com/ransomware-attack-texas-ophthalmology-practice/
"A Texas ophthalmology practice has experienced a ransomware attack that resulted in the encryption of files on its computer systems. The attack affected Victoria Surgery Center, Victoria Eye Center, and Victoria Vision Center and involved the personal and protected health information of 80,122 individuals.
The attack was detected on March 21, 2024, when the file encryption made certain computer systems inaccessible. Third-party forensics specialists were engaged to assist with the investigation and help secure systems, restore access to patient information, and determine the extent to which patient information was involved. The investigation confirmed that there had been unauthorized access to systems and that certain files containing patient data were accessed in the attack.
The file review has recently been completed and confirmed that names, addresses, and medical identification were compromised. The affected individuals have now been notified and offered 12 months of credit monitoring and identity theft protection services. Steps have been taken to prevent similar incidents in the future, including reviewing and revising internal data management and protocols and enhancing security measures."