Asheville Eye Associates reports major hacking incident affecting 204,984 patients
A North Carolina eye care provider, Asheville Eye Associates, PLLC, filed a breach report with HHS OCR on January 17, 2025. The filing describes a hacking/IT incident that compromised data stored on a network server. The breach affects 204,984 individuals. As a healthcare provider, the entity is a covered entity under HIPAA. This submission date reflects when the report was sent to regulators, not necessarily when the incident occurred or was discovered. Healthcare administrators should monitor for similar threats to their own network servers and ensure their incident response plans are current.
Sources differ:
- The HHS OCR breach portal lists 204,984 individuals; SecurityWeek reported about 147,000 and HIPAA Journal mentions an earlier count of 193,306.
Primary source: HHS OCR Breach Portal — Asheville Eye Associates, PLLC (NC) · reported 01/17/2025 · 204,984 individuals · Checked against the record 2026-10-18