Eyecare provider Panorama says data breach impacted over 375,000 customers

Colorado -based eyecare management services provider Panorama Eyecare said that the data security incident it suffered last year compromised the sensitive personal information of more than 375,000 individuals.

 

In a filing with the Office of the Maine Attorney General, Panorama Eyecare said that on June 3, 2023, it identified unauthorised access to its internal network and launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“After a thorough and detailed forensic investigation, we determined the unauthorised actor accessed our network between May 22, 2023 and June 4, 2023, and, as a result, may have accessed and removed certain files from our network environment.

 

“As part of our investigation, we have been working very closely with external cybersecurity professionals experienced in handling these types of incidents to conduct a comprehensive review of the impacted files and on May 9, 2024, we discovered that certain impacted files containing personal information may have been accessed and/or acquired by an unauthorised individual,” reads the notice.

 

The compromised data included names and other personal identifiers along with financial account numbers, credit and debit card numbers along with security codes, access codes, passwords and PINs for the accounts. Panorama’s filing with the state regulator also revealed that at least 377,911 individuals were impacted by the data breach.

 

While the company found no evidence of the compromised information being misused, it advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general.

 

It has also offered one year of complimentary identity protection and credit monitoring services through Experian IdentityWorks to all affected individuals.

 

Last year, the LockBit ransomware group claimed responsibility for stealing up to 798 GB of data from Panorama’s systems and listed it as a victim on its data leak site.