Vein care provider Center for Vein Restoration is notifying over 446,000 individuals that their personal, medical, and financial information was compromised in a recent cyberattack.

Headquartered in Greenbelt, Maryland, Center for Vein Restoration provides patient-centered treatment options for venous insufficiency, including varicose veins and spider veins.

The incident, the organization says in an incident notice, was identified on October 6, and involved unauthorized access to files containing the information of employees and of individuals who were treated by Center for Vein Restoration.

For patients, the potentially compromised information includes names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical record numbers, diagnosis and treatment information, health insurance information, and financial information.

The incident also resulted in the compromise of employment information for both current and former employees, Center for Vein Restoration says.

“To help prevent something like this from happening again, we have implemented, and will continue to adopt, additional safeguards and technical security measures to further protect and monitor our systems. Additionally, we are offering identity theft protection services,” reads the notice (PDF).

Center for Vein Restoration has notified the US Department of Health and Human Services that 446,094 individuals might have been affected by the data breach.

The organization has shared no details on how the data breach occurred, nor on the threat actor responsible for the incident. SecurityWeek has not seen any known ransomware groups claiming responsibility for the data breach.

SecurityWeek has emailed Center for Vein Restoration for additional information on the attack and will update this article as soon as a reply arrives.

Related: Medical Device Maker Artivion Scrambling to Restore Systems After Ransomware Attack

Related: Atrium Health Data Breach Impacts 585,000 People

Related: Cybercriminals Target Lincoln Health Care Company

Related: Major Florida Health System Fined $2M for HIPPA Breach