Instituto de Ojos de Puerto Rico, a leading ophthalmology clinic, has experienced a major data breach. It is currently reported that the protected health information (PHI) of at least 50,000 individuals has been compromised.
The Instituto de Ojos disclosed the cybersecurity incident to the U.S. Department of Health & Human Services on May 19, 2025. Compromised protected health information may include names, contact details, dates of birth, medical record numbers, treatment information, and other health-related data.
In addition to the HHS notification, Instituto de Ojos de Puerto Rico must work to notify affected individuals and provide specifics about the data breach.
If you believe you are one of the 50,000 individuals compromised due to this data breach:
For more about the company, visit the official Instituto de Ojos de Puerto Rico website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.