Nationwide Optometry

Nationwide Optometry, the covered entity (CE), reported that its business associate (BA) experienced a cyber-attack that affected the protected health information (PHI) of 73,073 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, drivers’ license or state identification numbers, financial and claims information, diagnoses, medications, health insurance information, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE and BA provided free credit monitoring and identity restoration services and implemented additional administrative, technical, and security safeguards.