Summit Eye and Optical
Disclosed May 1, 20233 years ago5,727 affectedConfirmed
The covered entity (CE), Summit Eye & Optical, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 5,727 individuals. The PHI involved included diagnoses, and potentially Social Security numbers. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE provided identity monitoring services and implemented additional administrative, technical, and security safeguards. Staff were also retrained in its requirements to protect and secure PHI.
What is known
| People affected | 5,727 (as reported to HHS) |
|---|---|
| Disclosed | May 1, 2023 |
| Happened | Mar 4, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: Summit Eye and Opticalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Summit Eye & Optical (Healthcare Provider, NJ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 1, 2023 | 5,727 |
| Indiana AGresidents of IN | May 18, 2023 | 2 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 5413 to 5727 · backfill source
- 2026-09-25 · disclosed: 2023-05-18 to 2023-05-01 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Summit Eye & Optical, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 5,727 individuals. The PHI involved included diagnoses, and potentially Social Security · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.