20/20 Eye Care Network, Inc

The covered entity (CE), 20/20 Eye Care Network, reported that it experienced a cyber-attack that affected the electronic protected health information (ePHI) of 4,142,440 individuals. The ePHI involved included names, addresses, Social Security numbers, and health insurance and claims information. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In its mitigation efforts, the CE offered complimentary credit monitoring services and strengthened its technical safeguards to better protect its PHI.