HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 19, 2017.
- Organization as reported
- Sheldon M. Golden O.D., Optometric Corporation, CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Dec. 19, 2017
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13965, row:5104)
- Archived copy
- Held in the private archive (provenance)
Sheldon M. Golden O.D., Optometric Corporation, the covered entity (CE), reported a breach that occurred at its West Covina, CA location when a computer server was infected with a variant of the CrySiS ransomware virus, which encrypted some files on its local computer drives. The breach affected approximately 7,583 individuals' protected health information (PHI) and included full names, addresses, dates of birth, claims information, billing codes, and clinical information. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE ensured all documents containing PHI are maintained on secure, encrypted servers along with its medical records. The CE also changed its firewall rules to prohibit any remote access to local drives in order to safeguard electronic PHI. OCR obtained assurances that the CE implemented the corrective actions listed.