SOUTHAMPTON, PENNSYLVANIA – October 30, 2025 - Tri Century Eye Care, P.C. determined on September 19, 2025 that a recent data security incident may have impacted protected health information and personal information belonging to certain employees and patients. We are providing this notice to notify you about the incident and to provide resources to assist you. We encourage individuals to consider the recommendations in this notice, including in the section on the Steps You Can Take to Help Protect Personal Information.

On September 3, 2025, we identified suspicious activity within our network, and promptly took steps to secure the environment and launched an investigation. With the support of cybersecurity experts, on September 19, 2025, we learned of information suggesting that an unknown actor gained unauthorized access to our network and acquired files, some of which contained personal and protected health information of our employees and patients. There was no evidence of any access to our current electronic medical records system. We then worked expeditiously to identify impacted information.

Based on the investigation of the incident, the potentially affected information will vary by individual, but may have included the following personal and protected health information: name, Social Security number, date of birth, medical or health information, health care treatment or diagnostic information, health insurance information, billing or payment information, or tax or financial information.

We have implemented additional measures to enhance network security and minimize the risk of a similar incident occurring in the future, including enforcing stronger password requirements, more frequent required password changes, reduced access permissions, and offline storage of older data. We also notified the Department of Health and Human Services and the FBI and will cooperate with any resulting investigation, providing whatever cooperation may be necessary to hold the perpetrators accountable.

We have established a toll-free call center to answer questions about the incident and to address related concerns. Call center representatives are available Monday through Friday 8:00 AM to 8:00 PM ET, excluding holidays. Additional information about recommendations for protecting your information are available below and by calling 1-800-405-6108.

The privacy and protection of personal and protected health information is a top priority for us, which deeply regrets any inconvenience or concern this incident may cause.

We are providing the following information to help those wanting to know more about steps they can take to protect themselves and their personal information:

What steps can I take to protect my personal information?

• Please notify your financial institution immediately if you detect any suspicious activity on any of your accounts, including unauthorized transactions or new accounts opened in our name that you do not recognize. You should also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement authorities.
• You can request a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies. To do so, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Contact information for the three nationwide credit reporting agencies is listed at the bottom of this page.
• You can take steps recommended by the Federal Trade Commission to protect yourself from identify theft. The FTC’s website offers helpful information at www.ftc.gov/idtheft.
• Additional information on what you can do to better protect yourself is included in your notification letter.

How do I obtain a copy of my credit report?

You can obtain a copy of your credit report, free of charge, directly from each of the three nationwide credit reporting agencies.  To order your credit report, free of charge once every 12 months, please visit www.annualcreditreport.com or call toll free at 1-877-322-8228. Use the following contact information for the three nationwide credit reporting agencies:

Equifax P.O. Box 740256 Atlanta, GA 30374 1-888-378-4329 www.equifax.com

Experian P.O. Box 4500 Allen, TX 75013 1-888-397-3742 www.experian.com

TransUnion P.O. Box 2000 Chester, PA 19016 1-800-916-8800 www.transunion.com

How do I put a fraud alert on my account?

You may consider placing a fraud alert on your credit report. This fraud alert statement informs creditors to possible fraudulent activity within your report and requests that your creditor contact you prior to establishing any accounts in your name. To place a fraud alert on your credit report, contact Equifax, Experian or TransUnion and follow the Fraud Victims instructions. To place a fraud alert on your credit accounts, contact your financial institution or credit provider. Contact information for the three nationwide credit reporting agencies is included in the letter and is also listed at the bottom of this page.

How do I put a security freeze on my credit reports?

You also have the right to place a security freeze on your credit report. A security freeze is intended to prevent credit, loans and services from being approved in your name without your consent. To place a security freeze on your credit report, you need to make a request to each consumer reporting agency. You may make that request by certified mail, overnight mail, or regular stamped mail, or online by following the instructions found at the websites listed below. You will need to provide the following information when requesting a security freeze (note that if you are making a request for your spouse, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social Security number; (3) date of birth; (4) address. You may also be asked to provide other personal information such as your email address, a copy of a government-issued identification card, and a copy of a recent utility bill or bank or insurance statement. It is essential that each copy be legible, display your name and current mailing address, and the date of issue. There is no charge to place, lift, or remove a freeze. You may obtain a security freeze by contacting any one or more of the following national consumer reporting agencies:

Equifax Equifax Information Services P.O. Box 105069 Atlanta, GA 30348 1-888-378-4329 www.equifax.com

Experian Experian Security Freeze P.O. Box 9554 Allen, TX 75013 1-888-397-3742 www.experian.com

TransUnion TransUnion P.O. Box 160 Woodlyn, PA 19094 1-800-916-8800 www.transunion.com

What should I do if my family member was involved in the incident and is deceased?

You may choose to notify the three major credit bureaus, Equifax, Experian and Trans Union, and request they flag the deceased credit file. This will prevent the credit file information from being used to open credit. To make this request, mail a copy of your family member’s death certificate to each company at the addresses below.

Equifax Equifax Information Services P.O. Box 105069 Atlanta, GA 30348

Experian Experian P.O. Box 9554 Allen, TX 75013

TransUnion TransUnion P.O. Box 380 Woodlyn, PA 19094