2026 Heart of America Eye Care — hacking incident Apr 1–6; patient data (≥500; review ongoing)
Data compromised
Patient data / PHI extent under investigation — OCR notified of at least 500 individuals
Technical writeup
Verified eye-care disclosure — HIPAA Journal coverage. MVP VIP Holdco d/b/a Heart of America Eye Care (locations in Overland Park, Prairie Village, Shawnee Mission, KS and Belton, MO) notified regulators and patients of a hacking incident. Forensics determined patient information was viewed or copied between April 1 and April 6, 2026. Investigation into the extent of PHI involvement was ongoing. HHS OCR was informed the breach affected at least 500 individuals, with the total to be updated when review concludes. recordsAffected 500 as the OCR floor.
Root cause
Hacking incident; patient information viewed or copied Apr 1–6, 2026