Arkfeld, Parson, and Goldstein, P.C. doing business as ilumin

Arkfeld, Parson, and Goldstein, P.C., doing business as Ilumin in Nebraska, was one of the victims of a significant data breach that originated from a ransomware attack on Eye Care Leaders, a provider of electronic health records (EHR) and patient management software solutions for eye care practices. This incident, which took place around December 4, 2021, led to unauthorized access to and potential compromise of the protected health information (PHI) of more than 2 million patients across various eye care providers.

For Ilumin, specifically, the breach affected approximately 14,984 patients. The compromised information included names, addresses, phone numbers, health insurance information, and medical information related to eye care services

Despite the breach, there was no evidence to suggest that sensitive data such as Social Security numbers were exfiltrated or used by unauthorized individuals. However, the possibility of unauthorized data access and theft could not be definitively ruled out due to insufficient log files

The breach was part of a larger incident involving Eye Care Leaders, where hackers gained access to its myCare Integrity solution and deleted databases and system configuration files. This affected at least 342,000 individuals and eight known organizations initially, with the number of affected individuals and organizations increasing as more information became available

The breach did not involve unauthorized access to the internal systems of the impacted practices