River City Eye Care, an Oregon-based optometry service provider with locations in Portland and Happy Valley, experienced a cyberattack claimed by the Genesis threat group, resulting in a data breach. Unauthorized actors gained access to the company’s computer network, exposing sensitive personal information of patients. The breach involved the compromise of protected data, though the exact scope (e.g., financial records, medical histories, or identifiers like Social Security numbers) was not detailed in the report. The incident triggered patient notifications, indicating potential risks of identity theft, fraud, or misuse of the exposed information. The attack underscores vulnerabilities in healthcare sector cybersecurity, where patient confidentiality is critical. No ransomware demands were mentioned, but the breach’s impact centers on customer data exposure, raising concerns over privacy violations and regulatory compliance (e.g., HIPAA). The company’s response includes disclosure and mitigation efforts, though long-term reputational and operational consequences remain possible.
TPRM report: https://www.rankiteo.com/company/river-city-eyecare-llc
"id": "riv0932409102325",
"linkid": "river-city-eyecare-llc",
"type": "Cyber Attack",
"date": "10/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'optometry',
'location': ['Portland, Oregon',
'Happy Valley, Oregon'],
'name': 'River City Eye Care',
'type': 'healthcare provider'}],
'customer_advisories': ['patient notifications'],
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'high',
'type_of_data_compromised': ['sensitive personal '
'information']},
'description': 'River City Eye Care, an Oregon-based provider of optometry '
'services with offices in Portland and Happy Valley, has begun '
'notifying patients about a data breach that exposed sensitive '
'personal information following unauthorized access to its '
'computer network. The breach was claimed by the Genesis '
'threat group.',
'impact': {'data_compromised': ['sensitive personal information'],
'systems_affected': ['computer network']},
'response': {'communication_strategy': ['patient notifications']},
'threat_actor': 'Genesis',
'title': 'River City Eye Care Data Breach Following Cyberattack by Genesis '
'Threat Group',
'type': ['data breach', 'cyberattack']}