Medical Management Resource Group (MMRG), operating as American Vision Partners, notified nearly 2.4 million patients about a hacking event that targeted its ophthalmology practices. The breach, detected on November 14, involved unauthorized activity on a network server, affecting over 2.35 million individuals. MMRG took immediate steps to contain the breach, isolate affected systems, engage cybersecurity experts, and notify law enforcement.
Personal information, including names, contact details, birthdates, and medical records, may have been compromised. Some individuals also face the risk of exposed Social Security numbers and insurance information. MMRG, acknowledging the severity, advised affected individuals to monitor their credit reports and account statements. The incident highlights the escalating threat landscape for healthcare organizations, emphasizing the need for robust cybersecurity measures, especially when dealing with third-party vendors.