EyeCare Partners, LLC (“ECP”) cares deeply about the patients of its managed practices, The Ophthalmology Group, Ophthalmology Consultants, Ophthalmology Associates, and Galanis Cataract & Laser Eye Center, and takes seriously its obligation to safeguard information entrusted to us. On January 28, 2025, ECP identified suspicious activity in an ECP-managed email account. Upon learning of the situation, ECP promptly contained the incident by securing the account to prevent further access and began an initial internal investigation into the incident. ECP engaged a forensic security firm to further investigate the incident and to confirm the security of its computer systems and network. The forensic investigation determined that an unauthorized third party temporarily accessed certain ECP-managed email accounts between December 3, 2024, and January 28, 2025.

ECP reviewed the potentially involved files to determine what, if any, personal information they contained. ECP recently determined that the files contained personal information for certain individuals. The information potentially involved varies by individual but may include an individual’s name, along with one or more of the following: address, date of birth, Social Security number, driver’s license number, health plan information and limited clinical information. Medical records and detailed clinical information, such as clinical notes, were not accessed in this incident.

ECP has begun mailing notification letters to those individuals whose information was potentially impacted and for whom ECP has a valid mailing address. As a precautionary measure, individuals should remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing their account statements and monitoring credit reports closely. If individuals detect any suspicious activity on an account, they should promptly notify the financial institution or company with which the account is maintained. They should also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement authorities, including the police and their state’s attorney general. Notified individuals may also wish to review the tips provided by the Federal Trade Commission (“FTC”) on fraud alerts, security/credit freezes and steps that they can take to avoid identity theft. For more information and to contact the FTC, please visit www.ftc.gov/idtheft or call 1-877-ID-THEFT (1-877-438-4338). Notified individuals may also contact the FTC at: Federal Trade Commission, 600 Pennsylvania Avenue, NW, Washington, DC 20580.

ECP takes its responsibility to safeguard personal information seriously and in response to this incident has reviewed and enhanced its technical security measures. Individuals seeking additional information may call a confidential, toll-free inquiry line at (833) 699-0349 from 8 a.m. – 8 p.m. EST, Monday through Friday.