Black Hills Regional Eye Institute Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Black Hills Regional Eye Institute data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Black Hills Regional Eye Institute
Black Hills Regional Eye Institute is an eye care medical practice located in the Black Hills region. The institute serves hundreds of doctors and patients, offering services that range from general vision screening to advanced procedures like laser eye surgery. The practice's team is involved in diagnosis, treatment, consultation, surgery, research and education.
What happened?
On or around Jan. 8, 2025, Black Hills Regional Eye Institute detected suspicious activity in its network. An investigation revealed that an unauthorized party accessed and acquired sensitive information as early as Jan. 4, 2025.
The ransomware group Qilin claimed responsibility for the attack and stated they obtained 200 GB of the organization’s data, which was posted on a dark web network. The breach was confirmed on July 30, 2025 and the practice began notifying affected individuals on Aug. 29, 2025.
Information Exposed
- First and last name
- Social Security number
- Date of birth
- Date of service
- Diagnostic treatment information
- Driver’s license number
- Insurance information
- Medical record number
- Medical history
- Medical treatment location
- Medications
- Provider name
- Surgical information
- Credit card information
The data breach was disclosed to the Maine Attorney General's office on Aug. 28, 2025 and published a Notice of Data Security Incident on its website on Aug. 29, 2025.
Your Rights and Next Steps
If you received a data breach notification from Black Hills Regional Eye Institute, you have important rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Credit monitoring services: Enroll in the free Experian IdentityWorks credit monitoring services, if offered.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If you received a notice or believe your information was affected by the Black Hills Regional Eye Institute data breach, you may have legal rights to compensation. The could include reimbursement for out-of-pocket expenses, time spent addressing the breach, or payment for emotional distress.
Lawyers are investigating claims related to this incident. To find out if you are eligible to join a lawsuit and pursue compensation, complete the form below.