Eyecare Center Data Breach Exposed Medical Information

Eye Care Center of Snohomish, an optometry practice in Snohomish, Washington, disclosed a data breach that affected approximately 3,059 individuals in the United States.

The breach was reported to the U.S. Department of Health and Human Services on Oct. 8, 2026. Eye Care Center of Snohomish posted a notice on its website.

Eye Care Center of Snohomish detected unauthorized activity involving portions of its network on Aug. 12, 2026. Upon discovering this activity, the practice engaged outside cybersecurity specialists, secured the affected environment and launched an investigation into the scope and nature of the incident.

The forensic investigation determined that a number of files in the practice's system had been accessed without authorization. Investigators traced the unauthorized access back to on or about July 28, 2026.

After identifying the scope of the unauthorized access, Eye Care Center of Snohomish conducted a thorough of the affected files.

The types of information exposed in the breach varied from person to person but may have included name, address, date of birth, medical information, diagnosis, lab results, medications and other treatment information.

On Aug. 21, 2026, a ransomware group calling itself The Gentlemen posted a claim on the dark web. In its posting, the group stated it had obtained data belonging to Eye Care Center of Snohomish and announced its intention to publish the stolen data within nine to 10 days.

Eye Care Center of Snohomish's response to the breach

Eye Care Center of Snohomish is encouraging individuals who may have been affected to remain vigilant against suspicious activity. The company recommends that patients review their account statements and monitor their free credit reports for any signs of unusual or unauthorized activity.

The practice has set up a dedicated toll-free call center that can be reached at 877-590-5365. The call center is available Monday through Friday from 8 a.m. to 5 p.m. Central Time, excluding major U.S. holidays. Representatives can assist callers in determining whether their information was identified as part of the incident and can answer questions about the breach.