FYidoctors (“we”, “us”, “our”) takes the privacy and security of personal information in our care very seriously. On November 10, 2023, we identified unauthorized activity in our network. We promptly took steps to secure our network and prevent against further unauthorized access, including disconnecting our systems from the network. We also engaged a team of third-party cybersecurity experts to investigate the cause and extent of this incident, and have retained external legal counsel to oversee our response to this incident and ensure we meet our legal obligations.

Our investigation into this incident determined the period of compromise was October 18 to November 10, 2023, during which the unauthorized third party accessed and copied certain data from our network. If you purchased any eyewear or other products from our online or physical stores, received eye examinations, or consulted with a FYi physician, your information may have been impacted. Please note that if we have your email or home address on file, you will have received a notice directly.

The review of the data involved in this incident revealed that some or all of the following types of information pertaining to you may have been impacted: name, phone number, date of birth, government-issued identification (e.g., driver’s license), financial-related information (e.g., account or routing number), health insurance-related information (e.g., policy or group number), medical information (e.g., diagnosis, treatment-related information, prescription information, etc.), health card number, salary, gender and/or social insurance number.

Please be advised that not all categories of information pertaining to you may have been impacted.

Additionally, we want to assure you that at this time, there is no evidence suggesting that any individual’s personal or personal health information was or is being used by an unauthorized user for any purpose, including to commit fraud or identity theft, as a result of this incident.

Additionally, our third-party cybersecurity experts determined that they were unable to restore certain patient records, specifically optical images, which were encrypted and rendered inaccessible as a result of the incident. During your appointment at our clinic, we take images of your retina, including blood vessels and nerves located in your eye to monitor for any changes and abnormalities. While doctors will still be able to detect optical abnormalities during your visits, they may not be able to immediately diagnose those abnormalities without being able to compare them with optical images taken at an earlier date.