DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

EyeSouth Partners notifies 24,000 patients after employee email account hacked

Posted on February 7, 2019 by Dissent

From the public notice issued by Georgia Eye Associates:

EyeSouth Statement Regarding Recent Security Incident

EyeSouth Partners (“EyeSouth”) recently suffered a security incident that potentially affected the protected health information (“PHI”) of Georgia Eye Associates patients. EyeSouth has provided the following information to Georgia Eye Associates out of an abundance of caution:

Between September 11, 2018 and October 25, 2018, an unknown individual had access to one EyeSouth employee email account. Upon becoming aware of the incident on October 25, 2018, EyeSouth immediately launched an investigation, confirmed the security of its system, and implemented procedures designed to enhance the effectiveness of its information security safeguards. EyeSouth also worked with a number of forensics experts to analyze the information affected by the incident. On December 19, 2018, EyeSouth determined that the incident potentially affected the name, patient ID number (that was randomly generated and specific to the practice), telephone number, email address, name of health insurance carrier (if any), and account balance information of some Georgia Eye Associates patients. For further information, individuals may call EyeSouth’s dedicated assistance line at 1-877-237-1071 (toll free), Monday-Friday, 9:00 a.m. to 7:00 p.m. EST.

And from the EyeSouth legal notice in media:

Eyesouth Partners (“Eyesouth”) Recently Suffered a Security Incident

EyeSouth Partners (“EyeSouth”) recently suffered a security incident that potentially affected the protected health information (“PHI”) of Georgia residents. EyeSouth is a business associate of Cobb Eye Center, South Georgia Eye Partners, Georgia Ophthalmology Associates and Georgia Eye Associates. EyeSouth is providing this notification out of an abundance of caution to address its obligations under HIPAA. Between September 11, 2018 and October 25, 2018, an unknown individual had access to one EyeSouth employee email account. Upon becoming aware of the incident on October 25, 2018, EyeSouth immediately launched an investigation, confirmed the security of its system, and implemented procedures designed to enhance the effectiveness of its information security safeguards. EyeSouth also worked with a number of forensics experts to analyze the information affected by the incident. On December 19, 2018, EyeSouth Partners determined that the incident potentially affected the PHI of Georgia residents. The PHI potentially affected by the incident varies by individual, and may include some of the following: the individual’s name, telephone numbers, address, email address, name and type of health insurance carrier, payment history and account balance, summary of charges and summary of service or procedure, and a randomly-generated practice-specific patient ID number. For a small subset of individuals, Social Security numbers were also potentially affected by the incident. EyeSouth is taking steps to notify individuals who may have been impacted by this incident, and is also providing free credit monitoring services for individuals whose Social Security numbers were potentially impacted. For further information, individuals may call EyeSouth’s dedicated assistance line at 1-877-237-1071 (toll free), Monday-Friday, 9:00 a.m. to 7:00 p.m. EST. 1-30/2019
January 30, 2019
February 28, 2019
February 7, 2019 11:50am

Related posts:

  • Mass. Eye and Ear Alerts Patients to Laptop Theft and Data Breach
  • Mass. Eye and Ear Alerts Patients to Laptop Theft and Data Breach
Category: HackHealth Data

Post navigation

← Indecent disclosure: Gay dating app left “private” images, data exposed to Web
Community Health System Agrees to Settlement of $4.5 Million for 2014 Data Breach →

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • Ex-student charged with wave of cyber attacks on Sydney uni
  • Detaining Hackers Before the Crime? Tamil Nadu’s Supreme Court Approves Preventive Custody for Cyber Offenders
  • Potential Cyberattack Scrambles Columbia University Computer Systems
  • 222,000 customer records allegedly from Manhattan Parking Group leaked
  • Breaches have consequences (sometimes) (1)
  • Kansas City Man Pleads Guilty for Hacking a Non-Profit
  • British national “IntelBroker” charged with causing $25 million in damages; U.S. seeks his extradition from France
  • France issues press statement about arrest of ShinyHunters members
  • Patients Allege Home Delivery Pharmacy Failed to Timely Notify Them of Data Breach
  • Hackers breach Norwegian dam, open valve at full capacity

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Microsoft’s Departing Privacy Chief Calls for Regulator Outreach
  • Nestle USA Settles Suit Over Job-Application Medical Questions
  • NY Attorney General James Affirms Hospitals Must Provide Access to Emergency Abortion Care
  • How Internet of Things devices affect your privacy – even when they’re not yours
  • Sky Views Personal Data as a Potential Weapon in IPTV Piracy War
  • Florida Used a Nationwide Surveillance Camera Network 250 Times To Aid in Immigration Arrests
  • Federal Court Strikes Down HIPAA Reproductive Health Care Privacy Rule

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.