Utah Valley Eye Center

Utah Valley Eye Center operates as an eye care provider offering vision examinations, prescription eyewear fitting, and general ocular health services to patients in the Utah Valley region of Utah, United States. As a healthcare organization it handles protected health information and is subject to federal privacy regulations that govern the confidentiality of patient data. The clinic schedules patient appointments through various channels, including online portals, and relies on third‑party vendors to support functions such as appointment reminders and patient communication. Its primary market consists of individuals seeking routine and specialized eye care within the local community, and it functions as an outpatient facility focused on preserving and improving visual health. The organization’s core activities center on delivering clinical eye services while managing the administrative processes necessary to support patient flow and follow‑up care.

In June 2018 the clinic experienced a data breach when a compromised third‑party patient appointment reminder portal operated by DemandForce allowed unauthorized access to patient email addresses. The breach led to fraudulent emails that impersonated PayPal payment notifications being sent to affected individuals, although the clinic confirmed that no health or financial information was accessed during the incident. Potentially exposed personal details included names, addresses, phone numbers, and dates of birth, highlighting the risks associated with third‑party service providers in healthcare settings. Following the breach Utah Valley Eye Center collaborated with DemandForce to implement enhanced security measures for the reminder system and revised its internal protocols governing the use of third‑party platforms. The incident underscored the importance of vigilant vendor management and prompted the clinic to strengthen its safeguards to protect patient communications and maintain trust in its services.