Jones Eye Clinic and Surgery Center

Profile narrative

Jones Eye Clinic and Surgery Center, which also operates under the alias Jones Eye Clinic, is a healthcare provider headquartered in the United States that focuses on delivering eye care services and performing surgical procedures related to ophthalmology. The facility maintains electronic medical records to store patient health information and operates billing systems to manage financial transactions associated with the care it provides. Patients who visit the clinic receive a range of services that can include diagnostic examinations, treatment planning, and surgical interventions aimed at preserving or improving vision.

On August 23, 2018, the clinic’s network was targeted by a ransomware attack that encrypted portions of its systems and accompanied a demand for payment in exchange for the decryption key. The intrusion potentially exposed the protected health information of more than forty thousand patients, encompassing details such as names, residential addresses, dates of birth, medical histories, visit summaries, and, in a subset of records, Social Security numbers and insurance information. In response to the breach, the clinic enlisted forensic investigators and engaged the Federal Bureau of Investigation to conduct a thorough examination of the incident. The investigative findings indicated that while the electronic medical records platform remained unaffected by the encryption, the billing systems had been compromised by the ransomware. To restore operations, the organization relied on its existing backups to recover the affected data, thereby avoiding any payment to the attackers. Following the resolution of the incident, the clinic implemented a series of enhanced security measures designed to strengthen its network defenses and reduce the likelihood of similar events. Additionally, individuals whose information may have been accessed were provided with guidance on steps they could take to mitigate potential risks of identity theft.

As a specialized provider of ophthalmic care and surgical services, the clinic occupies a distinct niche within the broader healthcare sector. Its operations are subject to federal and state regulations that govern the confidentiality, integrity, and availability of patient health information, particularly the requirements imposed by the Health Insurance Portability and Accountability Act. The 2018 ransomware episode underscored the critical importance of robust cybersecurity protocols for healthcare entities that manage sensitive data, highlighting the need for resilient backup strategies, continuous monitoring, and prompt incident response capabilities.

Incidents

1 incident linked to this organisation.