Kannarr Eye Care, an optometry practice in Kansas, discovered unauthorized access to its network systems on March 30, 2026. The company secured its systems and launched an investigation with cybersecurity and forensic specialists. On April 10, 2026, the ransomware group INC RANSOM claimed responsibility for the attack on a dark web network.
The investigation, completed on August 17, 2026, revealed that an unauthorized actor accessed files containing personal and health information of patients. The compromised data included names, Social Security numbers, medical information, and health insurance information. Approximately 14,003 individuals in the United States were affected by this incident. Kannarr Eye Care began mailing notification letters to impacted individuals on September 17, 2026. There is no evidence of financial data being exposed, and the reports indicate this was a direct breach of Kannarr Eye Care's systems, not a vendor incident.
Details are based on currently available information, and further developments may emerge as investigations progress and notifications are processed. The U.S. Department of Health and Human Services was reportedly notified on May 28, 2026.