Hattiesburg Eye Clinic, a longstanding ophthalmology practice based in Hattiesburg, Mississippi, is reportedly the target of a ransomware attack claimed by the hacker group known as The Gentlemen. As of this writing, Hattiesburg Eye Clinic has not publicly confirmed the incident, and the specific types of information potentially exposed have not yet been disclosed. Medical practices that maintain patient records have a responsibility to safeguard that information, and patients and staff affiliated with the clinic deserve to know what is being investigated and what steps they can take to protect themselves.
Hattiesburg Eye Clinic’s Data Breach Investigation
According to a September 15, 2026 post on the dark web monitoring site Ransomware.live, the hacker group The Gentlemen claimed responsibility for an attack on Hattiesburg Eye Clinic, a family-run ophthalmology and surgical practice founded in 1974 that has grown into the largest eye care provider in the Hattiesburg region. The listing estimates the attack occurred on or around September 14, 2026, one day before the group’s claim surfaced publicly. A separate cybersecurity blog, HookPhish, corroborated the claim, similarly reporting that The Gentlemen identified Hattiesburg Eye Clinic as a victim. As of this writing, Hattiesburg Eye Clinic itself has not issued a public statement confirming or denying the incident, and no notification letters to patients or staff have been publicly reported.
Ransomware groups like The Gentlemen typically operate using a double-extortion model, in which attackers first exfiltrate a victim’s data before encrypting internal systems, then threaten to publish the stolen files on a dark web leak site unless a ransom is paid. Whether or not a company pays the ransom, the underlying exposure of any stolen data to the attacker, and potentially to other criminals who purchase or view leaked files, remains a real risk to the individuals whose information was involved. Healthcare providers, including small and mid-sized specialty practices like ophthalmology clinics, have become increasingly common ransomware targets in recent years, in part because medical records combine highly sensitive personal, financial, and health information that carries significant resale value on dark web marketplaces.
Because Hattiesburg Eye Clinic has not yet confirmed the incident or disclosed which categories of data may have been affected, it is not possible to say with certainty what specific patient or employee information, if any, was accessed or stolen. Claims made by ransomware groups on their own leak sites are not independently verified at the time they are posted, and the scope of an alleged attack can sometimes be overstated, understated, or entirely inaccurate. That said, when a reputable dark web monitoring service and more than one cybersecurity outlet report the same claim from the same threat actor, it is generally treated as a credible signal warranting a closer look, even before a company’s own confirmation.
Patients and staff of an ophthalmology practice like Hattiesburg Eye Clinic would typically have provided the kind of information commonly stored in medical practice management and electronic health record systems, which can include names, contact information, dates of birth, insurance details, and treatment histories, along with billing and payment information collected as part of routine care. Until Hattiesburg Eye Clinic or an independent investigation confirms exactly what was involved, affected individuals should treat any of these categories as potentially at risk and take reasonable precautions in the meantime.
Individuals who receive treatment from a specialty medical practice like an ophthalmology clinic often assume their information is only shared within a small, tightly controlled circle of care providers. In reality, most modern medical practices rely on third-party software vendors for scheduling, billing, electronic health records, and insurance processing, any of which can become an entry point for attackers if not properly secured. This is one reason healthcare data breaches frequently affect more individuals than a practice’s own patient roster might suggest, since a single compromised vendor or shared system can expose records tied to multiple providers at once. Whether that dynamic applies here has not been confirmed, but it illustrates why the eventual scope of a healthcare-sector breach can take time to fully determine even after an initial attack claim becomes public.
It typically takes weeks or even months for a healthcare organization to complete a full forensic investigation after a suspected ransomware attack, determine exactly which systems and records were accessed, and prepare formal notification letters that comply with state and federal breach notification requirements, including the Health Insurance Portability and Accountability Act’s breach notification rule for medical providers. Until that process concludes, both the true scope of an incident and the specific individuals affected often remain unclear even to the organization itself. This is a normal part of responding to a suspected cyberattack, not evidence of wrongdoing or a slow response, but it does mean that individuals connected to Hattiesburg Eye Clinic may not receive definitive answers about their own exposure for some time.
When Did This Breach Occur?
The alleged attack on Hattiesburg Eye Clinic is estimated to have occurred on or around September 14, 2026, based on the timeline reported by Ransomware.live, with the hacker group’s claim first surfacing publicly on September 15, 2026. Hattiesburg Eye Clinic has not published its own timeline or confirmed a specific incident date, and no additional detail is currently available about when the clinic itself became aware of any unauthorized activity.
What Information Was Breached?
At this time, the specific types of information involved in the alleged Hattiesburg Eye Clinic incident have not been publicly disclosed by the clinic, the alleged attackers, or independent reporting. Until Hattiesburg Eye Clinic issues an official statement or notification, the exact scope of any exposed patient or employee data remains unconfirmed.
What You Can Do
If you are a current or former patient or employee of Hattiesburg Eye Clinic, there are steps you can take now while more information becomes available, including:
- Monitor your bank and credit card statements for unauthorized transactions
- Watch for a notification letter from Hattiesburg Eye Clinic if you may have been affected
- Consider placing a fraud alert or credit freeze with the three major credit bureaus as a precaution
- Be cautious of unsolicited emails, texts, or calls referencing the clinic or claiming to be from Hattiesburg Eye Clinic, since scammers sometimes exploit breach news to run phishing scams
- Keep records of any suspicious account activity in case you need to document harm later
File a Data Breach Lawsuit Against Hattiesburg Eye Clinic
If you believe your personal or medical information may have been exposed as a result of this incident, you may have legal options. Companies and medical practices that collect sensitive patient information have a duty to protect it, and when that duty is breached, affected individuals can face real and lasting harm.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
