CEI Vision Partners Data Breach
The 2024 CEI Vision Partners data breach involved temporary unauthorized access to the organization's computer network by an unknown third party. According to the official notice, access occurred between May 24 and May 27, 2024.
Exposed Data Types
2 sensitive7- Medical information
- Health insurance information
- Names
- Contact information
- Dates of birth
- Social security numbers
- Financial account information
About This Breach
CEI Vision Partners is a network of eye-care practices that includes Columbus Ophthalmology Associates.
When did the breach occur?
CEI Vision Partners detected unauthorized access to its network on May 26, 2024. A forensic investigation determined that the third party accessed certain systems between May 24 and May 27, 2024. The organization completed its review of the affected files on June 10, 2025.
What information may have been affected?
Depending on the person, the information may have included names, contact information, dates of birth, Social Security numbers, financial-account information, limited clinical information and health-plan information. The notice states that not every category applied to every person.
How many people were affected?
The U.S. Department of Health and Human Services breach record reports that the incident affected 10,841 people.
What did the organization do?
The organization said it secured the network, worked with a forensic security firm and strengthened technical safeguards. At the time of notice, it said it was not aware of fraud or identity theft involving the affected information and offered one year of identity-monitoring services to affected people.
What should affected people do?
Notice recipients should use the data categories listed in their own letters to guide monitoring of credit reports and financial accounts. People whose Social Security or financial-account information was involved may wish to consider a credit freeze or fraud alert.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
