DANIEL C. HARRIS, O.D Listed by 8base Ransomware Group

On June 15, 2023, DANIEL C. HARRIS, O.D. appeared on the leak site operated by the 8base ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the optometry practice. The disclosure does not specify the number of individuals affected or list exact data types beyond the general description of internal files.

Details from the 8base Listing

The primary disclosure on the 8base leak site indicates that Harris Eye Care of Davison suffered a ransomware incident in which attackers extracted internal files before encrypting systems. No patient record count is provided, and the listing does not detail specific categories such as names, addresses, Social Security numbers, or medical information. The site follows the group’s standard format of naming the victim, posting the date, and offering a sample of the claimed stolen data while threatening full publication if demands are not met. Public reporting on 8base states the group typically uses this leak site to pressure victims after initial encryption and data exfiltration.

Why This Matters for You and Your Family

When a local healthcare provider like an optometry practice is hit, the people most exposed are ordinary patients and their families. Even without an exact count in the disclosure, any internal files likely contain contact details, insurance information, and treatment records for individuals who received glaucoma care, dry-eye treatment, contact-lens fittings, or routine family vision exams. If your family has visited Harris Eye Care of Davison, your personal and health-related information may now sit in an attacker-controlled archive. Medical data carries long-term risk because it is difficult to change and can be used for insurance fraud, prescription scams, or targeted phishing that references real appointments or conditions.

Doxxing and Identity-Chain Risks

Internal files from a medical office often link names and addresses to phone numbers, email accounts, insurance IDs, and sometimes dates of birth. Once attackers or subsequent buyers obtain these details, they can chain them across dozens of other breaches to build a complete profile. A single leaked email or phone number becomes the bridge that connects your gaming username, social-media handles, and family members’ accounts. This is exactly how credential leaks cascade into account takeovers that expose children’s gaming profiles or household financial data. Continuous monitoring that maps these connections is essential because the exposure rarely stops at the original breach.

8base Ransomware Group Track Record

Public reporting attributes the emergence of 8base to early 2022. The group rapidly became one of the most active ransomware operations by focusing on small and midsize businesses rather than only large enterprises. Notable prior victims include municipal governments, manufacturers, and professional service firms. Their typical playbook involves initial access through compromised remote desktop credentials or exploited vulnerabilities, followed by data exfiltration using common file-transfer tools, deployment of their ransomware payload, and dual extortion: demanding payment to decrypt systems while simultaneously threatening to publish stolen files on their leak site. The 8base leak site remains active and continues to list new victims on a near-weekly basis.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches you or your family is caught in hours rather than months.
• Rotate any password you ever used at Harris Eye Care of Davison or related patient portals anywhere it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts, which frequently chain back to the same address or parent email.
• Let remediation specialists handle takedown requests across data brokers and extortion sites so you do not have to negotiate or monitor the dark web yourself.

The incident shows that even a single-provider breach can feed long-term identity chains that threaten every member of a household. Starting now with deliberate monitoring and cleanup gives you the best chance of limiting damage before criminals connect the dots. DoxxScan by GalaxyWarden delivers that protection through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full family coverage that includes children’s gaming accounts.