A group operating under the name The Gentlemen has posted a listing naming Hattiesburg Eye Clinic on its dark web extortion site, claiming to have obtained data from the healthcare provider’s systems. The posting, dated September 14, 2026, was identified and logged by ransomware.live, a security research platform that tracks the public leak sites maintained by ransomware groups. It is important to stress that this is a claim made by a criminal group seeking leverage, not a confirmed security incident. Hattiesburg Eye Clinic has not issued any public statement addressing the allegation, and no independent verification of the claim has surfaced.
What the leak-site posting does and does not tell us
- The claimed date of the incident, per the group’s own listing, is September 14, 2026.
- Hattiesburg Eye Clinic operates in the healthcare sector, which typically maintains patient records, appointment and billing data, and other sensitive information — but the group has not disclosed what, if anything, was actually taken.
- No specific data categories, file counts, or volumes have been named in the posting reviewed by researchers.
- There is no confirmation from Hattiesburg Eye Clinic, from a regulator, or from any independent forensic source that a breach occurred.
- Ransomware groups frequently exaggerate or fabricate claims to pressure victims into contact or payment, so the listing alone should not be treated as proof of compromise.
How patients and staff might reasonably respond while this is unresolved
- Update passwords for any patient portal, billing, or scheduling accounts tied to the clinic, and avoid reusing that password anywhere else.
- Turn on two-factor authentication wherever it’s offered, particularly for email and financial accounts.
- Be wary of unsolicited calls, texts, or emails referencing medical appointments, billing, or insurance claims — these are common phishing lures following alleged healthcare incidents.
- Review insurance statements and financial accounts periodically for anything unfamiliar.
- Consider a service like a service like Aura or LifeLock that offers identity monitoring, so you’ll be alerted quickly if personal information tied to you begins circulating elsewhere.
BreachLetter will revisit and update this article if Hattiesburg Eye Clinic issues a statement confirming or denying the incident, or if the matter is formally disclosed to regulators or affected individuals.