The Incransom ransomware operation has added a North Carolina ophthalmology practice to its dark web leak site, according to ransomware tracker records. The listing was logged on August 31, 2026.
New Century Ophthalmology Group runs practices in Raleigh and Oxford, North Carolina, offering cataract surgery, glaucoma treatment, and oculoplastic procedures through fellowship-trained specialists. Eye care groups hold the same blend of identifiers, insurance details, and clinical records as other medical practices, and several have appeared on leak sites over the past year.
The posting lists the practice alongside several non-healthcare victims added the same day. No stolen data has been published yet, and the practice has not released a statement about the claim, which trackers have not independently confirmed.
For ophthalmology and other specialty groups, the incident is a reminder that small and mid-size practices remain preferred targets, and that prompt disclosure plus a tested response plan can limit the fallout from a claimed intrusion.
