On October 28, 2022, multiple eye care practices filed notice of a data breach with the Montana Attorney General stemming from a third-party data breach at U.S. Vision, Inc. According to U.S. Vision, the breach resulted in the full names, Social Security numbers, addresses, dates of birth, protected health information, and health insurance information being compromised. Recently, the filing practices sent out data breach letters to all affected parties, explaining the U.S. Vision data breach and what they can do to protect themselves from identity theft and other frauds.
If you receive a data breach letter from Nationwide Optometry, P.C., SightCare, Inc., Nationwide Vision Center, LLC, or U.S. Vision, Inc., it means that your sensitive information was compromised in the recent breach. As we’ve discussed in prior posts, it also means that you are at an increased risk of identity theft and other frauds. Therefore, it is essential that you take the time to familiarize yourself with the various ways you can protect yourself and what legal options you may have to hold U.S. Vision accountable.
What We Know About the U.S. Vision Data Breach
The available information regarding the U.S. Vision breach comes from several companies’ filings with the Montana Attorney General. More specifically, three entities filed notice with the Montana AG: Nationwide Optometry, P.C., SightCare, Inc., and Nationwide Vision Center, LLC. In large part, the companies’ letters are identical and are based on the relationship between the filing entity and U.S. Vision.
Apparently, Nationwide Optical Group, LLC acquired or became affiliated with several practices in 2019. Prior to this, the acquired practices were affiliated with U.S. Vision. However, even after the acquisition, Nationwide Optical Group continued to use U.S. Vision’s administrative services for the newly acquired practice groups. Evidently, Nationwide Optometry, P.C., SightCare, Inc., and Nationwide Vision Center, LLC were three of the acquired or affiliated practices.
The filing companies explain that on May 12, 2021, U.S. Vision became aware of suspicious activity within its computer network. In response, the company secured its systems and worked with a third-party cybersecurity firm to investigate the incident.
The investigation revealed that an unauthorized party gained access to U.S. Vision systems between April 20, 2021 and May 17, 2021, and that sensitive patient and employee information was compromised as a result.
At this point, Nationwide Optometry, SightCare, and Nationwide Vision Center sought additional information about which parties’ data was leaked. However, at the time, U.S. Vision was unable to confirm who was affected. However, on September 22, 2022, U.S. Vision finished its investigation into the incident, confirming which parties were affected, and passed this information on to Nationwide Optometry, SightCare, and Nationwide Vision Center.
While the breached information varies depending on the individual, it may include your full name, date of birth, and address, Social Security number, taxpayer identification number, driver’s license number, financial account information, medical information, treatment information (such as medical record number, dates of service, provider name, diagnosis or symptom information, and prescription/medication), health insurance, and billing and claims information.
On October 28, 2022, Nationwide Optometry, SightCare, and Nationwide Vision Center sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.
More Information About U.S. Vision, Inc.
Founded in 1885 as Wall & Ochs, U.S. Vision, Inc. is now a chain of optical centers and doctor practices with locations across the United States. U.S. Vision has a number of retail partners where its stores are located, including JCPenney, Meijer Optical, Boscov’s Optical, Optical Center, and 2020 Vision Centers. U.S. Vision employs more than 2,700 people and generates approximately $300 million in annual revenue.
