On October 26th, 2020, Northwest Eye Surgeons, P.C. and Sight Partners LLC (collectively, “NES”) made public a notice which stated that their computer systems had been hacked by an external source.
The data breach reportedly first occurred on May 1st of the same year, though NES did not detect the intrusion until a later date. It is understood that, as soon as the data privacy incident was discovered, a 3rd-party cybersecurity firm was hired to conduct a thorough investigation that finalized on July 31st, 2020. Soon after, on August 7th, 2020, Northwest Eye Surgeons then retained yet another outside vendor to determine exactly which records may have been affected. Upon the conclusion of this follow-up investigation, the persons whose sensitive information may have been affected were contacted.
It is believed that in this data privacy event, the following personal information may have been unlawfully accessed:
As of the writing of this article, no evidence has been made public which suggests the sensitive data has been misused. NES has also indicated that new internal procedures, including 2-factor authentication for emails, have been implemented in order to prevent additional data breaches.
Source: https://apps.web.maine.gov/online/aeviewer/ME/40/ee0553a5-a0eb-4f05-ad25-786f366389df.shtml
Saeed & Little, LLP is a data breach law firm committed to ensuring that justice is available to all victimized groups.
In the case of data breach and other sensitive information incidents, Saeed & Little understands how critical it is to act promptly. The days, if not the hours, after such a data leak can make a significant difference for those affected.
Ali Saeed, a founding partner at the Saeed & Little firm, as well as his experienced legal team are currently conducting an investigation into the data privacy event at NES. The law firm is working diligently to determine the legal rights of those involved in this incident.
Mr. Saeed is confident that if there are grounds for a class action to be filed in the matter, his team would be prepared to appropriately defend the rights of individuals affected, whether the negative repercussions were minimal or substantial in their nature.