Eye Care Center of Snohomish Data Breach Investigation
Eye Care Center of Snohomish has reported a data security incident that may have involved certain patients’ personal and medical information. According to the organization’s online notice, an unauthorized actor may have accessed a limited number of files within its system. Strauss Borrelli PLLC is investigating the incident and potential legal rights of affected individuals. If you received a notice or believe your information may be involved, you can fill out the secure contact form on this page to ask about claim eligibility.
Key Facts at a Glance
- Entity Involved: Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish (Healthcare)
- Incident Type: Reported unauthorized network and file access
- Date of Incident: On or about July 28, 2026
- Discovery Date: August 12, 2026
- Official Notice Date: Not specified in the available notice
- Exposed Information: Names, addresses, dates of birth, and medical information that may have included diagnoses, laboratory results, medications, or other treatment information
- Affected Population: Not publicly disclosed in the available notice
What Happened?
According to its online data security notice, Eye Care Center of Snohomish detected unauthorized activity involving portions of its network on August 12, 2026. Based on its review of forensic evidence, the organization said it believes an unauthorized actor gained access to a limited number of files in its system. The provider reported that it engaged outside cybersecurity specialists, secured its environment, and began reviewing potentially affected files to determine what information and individuals may have been involved.
The notice states that the provider confirmed the impacted population on or about September 28, 2026. It also says there was no indication at the time of the notice that the affected information had been misused. Incident records report a public listing on a state attorney general portal on October 8, 2026, but the available materials do not identify the specific portal or provide an individual notification date.
What Information Was Exposed?
Eye Care Center of Snohomish reported that the information involved differed by individual. Potentially affected files may have contained a person’s name, address, date of birth, and medical information. The medical information may have included diagnoses, laboratory results, medications, and other treatment details. The notice does not indicate that every listed data element was involved for every person.
Because this incident concerns healthcare information, affected patients should watch for medical identity theft, unfamiliar patient bills, false insurance-verification requests, suspicious prescription inquiries, and messages impersonating a healthcare provider. The available notice does not disclose Social Security numbers, financial account information, or payment card data as affected categories.
What Should You Do Next?
- Confirm whether your information was identified: Review any letter or email you received and retain a copy. The provider’s notice directs people with questions to call 877-580-5358 to determine whether their information was identified as part of the incident.
- Review medical and insurance records: Check explanation-of-benefits statements, patient portals, pharmacy histories, and bills for appointments, tests, prescriptions, or providers you do not recognize. Promptly dispute suspicious entries with the provider and insurer.
- Be cautious about healthcare scams: Do not provide insurance numbers, portal credentials, payment details, or verification codes in response to unsolicited calls, texts, or emails. Contact the medical provider through a trusted number before responding.
- Monitor your credit reports: Obtain free reports from the federally authorized AnnualCreditReport.com website and review them for unfamiliar accounts or inquiries. Consider a fraud alert or security freeze if your circumstances warrant additional protection.
- Document suspicious activity: Save notices, envelopes, emails, screenshots, bills, and records of calls or expenses. If identity theft occurs, report it through IdentityTheft.gov and follow the recovery plan generated for you.
Your Legal Rights
People whose information was involved may have rights under applicable state data breach, privacy, consumer protection, or other laws. Depending on the facts and governing law, those rights may include receiving an accurate notice, obtaining information about the incident, seeking appropriate protective measures, or pursuing compensation for documented losses. The availability of any claim depends on factors such as the information involved, whether it was accessed or misused, resulting harm, and the individual’s state of residence.
Keep the incident notice and records of any time spent, expenses incurred, fraudulent activity, medical-record corrections, or credit problems. Consulting an attorney can help an affected person understand potential options, but general online information is not a substitute for advice concerning an individual situation.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC represents consumers in data privacy and cybersecurity matters and can evaluate whether an incident may support legal claims. The firm can review the available notice, assess the categories of information reportedly involved, explain applicable rights, and help preserve relevant evidence. A confidential consultation can provide information about possible options without promising a particular result.
If you received a breach notification letter from Eye Care Center of Snohomish:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
