Reeve-Woods Eye Center Data Breach (2014)

I am writing on behalf of Reeve-Woods Eye Center (the Eye Center), which is an eye clinic with two facilities: (1) 460 W. East Avenue, Suite 110, Chico, California 95926; and (2) 6009 Pentz Road, Paradise, California 95969. We recently discovered a security breach of the Eye Centers computer systems that may have compromised the privacy of patients personal health information. We are sending this letter to you to notify you of a possible breach of your personal information as part of our commitment to patient privacy. On September 17, 2014, our information technology consultant discovered that unknown individuals had breached the Eye Centers server and installed malware on two computers, one at each facility. The malware was capturing screenshots (i.e., a copy or image of what is seen on a computer screen at a given time) which included patients protected health information. We suspect the malware may have been installed in or around August 2014. The following is a non-exhaustive list of the types of information about patients that may have been accessed: name; social security number; date of birth; home address; phone numbers; dates of service; Medi-Cal ID number, Medicare ID number, and/or other insurance information; information regarding Medi-Cal appeals; diagnosis codes; treatment information; and medical history.