Skip to content
Leak-site post naming EnVision Eye Care, captured by ThreatCluster

EnVision Eye Care

n0n

Ransomware leak-site victim intelligence · EN

Posted
Oct 16, 2026
Country
USA
Industry
Healthcare - Ophthalmology

Summary

Written by ThreatClusterfrom victim profile, leak post

n0n claims to have stolen 13,308 patient records with names and dates of birth from EnVision Eye Care's December 2025 patient database backup, along with the complete backup history from 2018 through 2025, patient eye examination records with full ocular, medical and social history, and the OCT eye scan archive. The leak is in countdown status. The victim is EnVision Eye Care, a USA-based ophthalmology healthcare provider.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Patient records of a Mississippi ophthalmology practice: 13,308 patient records with names and dates of birth, taken from the patient database backup of December 2025; The complete patient database backup history of the practice, 2018 through 2025; Patient eye examination records with full ocular, medical and social history; The OCT eye scan archive of the practice

Data categories
PIIMedical dataPatient recordsOphthalmology data

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture