Aloha Laser Vision Notifies Patients of Third-Party Data Security Incident
Home | Aloha Laser Vision Notifies Patients of Third-Party Data Security Incident
Aloha Laser Vision has recently become aware that a third party data security incident may have resulted in unauthorized access to the sensitive personal information of some of our patients. In 2021, Aloha Laser Vision was using the electronic medical records platform “myCare Integrity,” which was provided by the practice performance company Eye Care Leaders (“ECL”). This incident has affected eye care practices across the country, and is not specific to Aloha Laser Vision. There is no evidence of any attempted or actual misuse of any personal information. However, out of an abundance of caution, Aloha Laser Vision is notifying, via mail, any patient whose information may have been stored on the myCare Integrity system at the time of a data security incident, and providing resources to help protect potentially affected individuals. This data security incident occurred entirely within Eye Care Leaders’ network environment, and there were no other remedial actions available to Aloha Laser Vision.
According to Eye Care Leaders, on or around December 4, 2021, an unauthorized party accessed myCare Integrity data and deleted databases and system configuration files. According to Eye Care Leaders, upon identifying the activity, Eye Care Leaders’ incident response team immediately stopped the unauthorized access and began investigating the incident. Notably, there was no evidence that this incident involved unauthorized access to any of Aloha Laser Vision’s patient records.
However, a lack of available forensic evidence prevented Eye Care Leaders from ruling out the possibility that some protected health information and personally identifiable information may have been exposed to the bad actor. As stated above, there was no evidence that this information was actually accessed by the bad actor.
As of this writing, Aloha Laser Vision has not received any reports of identity theft related to this incident. However, in the interest of complete transparency, the information present during the period of unauthorized access may have included our patients’ name, address, date of birth, diagnostic information, and health insurance information. Aloha Laser Vision is providing a toll free number, 1 (855) 503-1969, Monday through Friday 9:00 a.m. to 6:30 p.m. Eastern Time, excluding all major U.S. Holidays., if any current or former patients have questions.
Aloha Laser Vision sincerely regrets any inconvenience or concern that this matter may cause, and remains dedicated to ensuring the privacy and security of all information in our control.