Skip to content
Ransomware

New Century Ophthalmology Group listed by Inc Ransom on leak site

The Inc Ransom group has listed New Century Ophthalmology Group on its leak site, alleging a data breach.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Inc Ransom
  • Country: United States
  • Sector: Healthcare
  • Announcement date: August 31, 2026

Inc Ransom claims data breach at New Century Ophthalmology Group

The threat actor known as Inc Ransom has listed New Century Ophthalmology Group on its dedicated leak site, alleging that the organization has been the victim of a data breach. The announcement, which was made on August 31, 2026, marks the beginning of the group's leak process regarding this specific target. While the group has officially added the organization to its list of victims, the claim remains an allegation by the threat actor.

Details of the alleged attack

According to the announcement published by Inc Ransom, the group has begun the process of leaking data they claim belongs to New Century Ophthalmology Group. To support their claims, the threat actors have provided images of various documents related to the organization's operations as alleged proof of the intrusion. This method of providing visual evidence is a common tactic used by ransomware groups to demonstrate the legitimacy of their claims to both the victim and the public.

The group initiated this leak process on August 31, 2026, the same date they claimed the attack occurred. By listing the entity on their leak site, the group is signaling its intent to move forward with its extortion campaign. Such actions are typical of modern ransomware operations where the goal is to exert maximum pressure on the target through public exposure.

Scope of the leaked information

Regarding the specific contents of the alleged breach, the information currently available is limited. The images shared on the leak site appear to contain documents related to the organization's operational processes. However, there is no detailed information provided by the threat actor regarding the full scope or the specific nature of the leaked data. The listing does not name any specific data types or provide a count of the files involved.

Summary of data details

  • The listing names no specific data types.

About New Century Ophthalmology Group

New Century Ophthalmology Group is an eye care practice that operates in Raleigh and Oxford, North Carolina. The organization provides a wide range of comprehensive eye care services to its patients. Their medical offerings include specialized procedures such as cataract surgery, glaucoma treatment, and various oculoplastic procedures.

Potential impact and industry implications

This alleged breach may pose a significant risk to the confidentiality of patient data for the healthcare organization. Because the organization is based in the United States, a potential data breach could lead to complex legal sanctions and administrative processes under HIPAA regulations. Healthcare organizations are particularly sensitive to such incidents due to the highly regulated nature of medical information and the critical importance of patient privacy.

The Inc Ransom group is known for employing double extortion tactics. In these scenarios, threat actors do not just encrypt an organization's systems but also steal sensitive data, threatening to publish it to force a ransom payment. This tactic can result in severe reputational damage for the organization and exposes patients to secondary risks, such as identity theft. When such an event occurs, organizations often find it necessary to initiate forensic investigations to determine the full scope of the breach and to fulfill their obligations to notify all affected parties.

In the broader context of cybersecurity, healthcare providers must remain vigilant against these evolving threats. Defensive measures typically involve robust data encryption, strict access controls, and continuous monitoring of networks to detect unauthorized movement. As ransomware groups continue to target the healthcare sector, the necessity for comprehensive incident response plans and adherence to regulatory standards becomes increasingly vital for maintaining patient trust and organizational integrity.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories