Smart Eye Care listed on Booba Project leak site

• Ransomware group: Booba Project
• Country: United States
• Sector: Healthcare
• Announcement date: September 23, 2026

The threat actor known as Booba Project has listed the healthcare organization Smart Eye Care on its dedicated leak site. According to the announcement made on September 23, 2026, the group claims to have successfully targeted the organization and exfiltrated a significant volume of data from its internal systems.

The claims of the Booba Project

The Booba Project has published an announcement on its leak site identifying Smart Eye Care as a victim of their operations. In this claim, the group alleges that they have gained unauthorized access to the organization's systems and managed to extract data. The threat group asserts that the breach occurred on September 23, 2026, the same day the incident was announced on their platform.

This type of activity is characteristic of modern ransomware operations, which often utilize double extortion tactics. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish stolen data on a public leak site, threat actors attempt to pressure the victim into paying a ransom to prevent the exposure of confidential information.

Details regarding the claimed data

While the threat group has provided some specifics regarding the scale of the breach, much of the information remains unverified. The Booba Project claims to be in possession of 7 GB of data belonging to Smart Eye Care. However, the group has not provided any specific details regarding the actual content or the nature of the files contained within this 7 GB volume.

The listing does not provide any screenshots or specific file counts to substantiate the claims. Furthermore, the group has not disclosed a ransom demand or any other specific details regarding their motivations or the exact contents of the exfiltrated data. The listing names no specific data types.

About Smart Eye Care

Smart Eye Care is an optometry and eye health services provider located in New York. The organization specializes in a variety of eye care services, including eye examinations, the provision of contact lenses, and various eyewear services for its patient base.

Risk assessment and industry implications

This incident may pose a significant risk to the privacy of the organization's patient data. Because the entity operates within the healthcare sector, the potential exposure of sensitive information carries specific implications. If the leaked data contains personal health information, the organization could face challenges regarding compliance with relevant data protection regulations.

Beyond the immediate privacy concerns, there are secondary risks associated with such breaches. Stolen data can be utilized by malicious actors for identity theft or for conducting highly targeted phishing campaigns against the organization or its clients. Such campaigns often use the stolen context to appear more legitimate to the recipient.

For organizations operating in the healthcare sector, maintaining robust data security protocols is essential to mitigate these risks. Common defensive steps for such entities include implementing strict access controls, maintaining comprehensive logging and monitoring to detect unauthorized exfiltration, and ensuring that data is encrypted both at rest and in transit. Furthermore, when a breach is suspected, organizations may need to review their security posture and notify the relevant authorities to comply with legal obligations and manage the fallout of the incident.