Sylvester Eye Care Notifies Patients of Third-Party Data Security Incident
Sylvester Eye Care has become aware of a third party data security incident that may have resulted in unauthorized access to the sensitive personal information of some of our patients. In 2021, Sylvester Eye Care was using the electronic medical records platform “myCare Integrity,” which was provided by the practice performance company Eye Care Leaders (“ECL”). This incident has affected eye care practices across the country, and is not specific to Sylvester Eye Care. There is no evidence of any attempted or actual misuse of any personal information. However, out of an abundance of caution, Sylvester Eye Care is notifying, via mail, any patient whose information may have been stored on the myCare Integrity system at the time of a data security incident, and providing resources to help protect potentially affected individuals. This data security incident occurred entirely within Eye Care Leaders’ network environment, and there were no other remedial actions available to Sylvester Eye Care.
According to Eye Care Leaders, on or around December 4, 2021, an unauthorized party accessed myCare Integrity data and deleted databases and system configuration files. According to Eye Care Leaders, upon identifying the activity, Eye Care Leaders' incident response team immediately stopped the unauthorized access and began investigating the incident. Notably, there was no evidence that this incident involved unauthorized access to any of Sylvester Eye Care’s patient records.
However, a lack of available forensic evidence prevented Eye Care Leaders from ruling out the possibility that some protected health information and personally identifiable information may have been exposed to the bad actor. As stated above, there was no evidence that this information was actually accessed by the bad actor.
As of this writing, Sylvester Eye Care has not received any reports of identity theft related to this incident. However, in the interest of complete transparency, the information present during the period of unauthorized access may have included our patients’ name, address, date of birth, social security number, diagnostic information, and health insurance information.
Sylvester Eye Care is providing a toll free number, 1 (855) 503-3018, Monday through Friday 9:00 a.m. to 6:30 p.m. Eastern Time, excluding all major U.S. Holidays., if any current or former patients have questions.
Sylvester Eye Care sincerely regrets any inconvenience or concern that this matter may cause, and remains dedicated to ensuring the privacy and security of all information in our control.