An Ohio-based healthcare provider has been fined $600k over a data breach that exposed the records of 2.1 million patients across America. Cyber-criminals targeted EyeMed Vision Care in June 2020.