eyephy.com Listed by lockbit3 Ransomware Group

Eye Physicians of Central Florida was listed on the LockBit 3.0 ransomware leak site on November 06, 2023. The ophthalmology practice, which provides eye care to pediatric and adult patients across Central Florida, is claimed to have had internal files exfiltrated during a ransomware attack. The leak-site listing does not specify the number of records affected or detail exactly which documents were taken.

Primary Disclosure Details

The LockBit 3.0 leak site states that internal files were exfiltrated from eyephy.com in a ransomware incident. The posting appeared on November 06, 2023, and follows the group’s standard format of naming the victim organization and providing a sample of stolen data as proof. The disclosure does not quantify the volume of data or list specific record types such as patient names, medical records, or payment information. Public reporting on LockBit operations indicates the group typically posts a countdown timer and threatens to publish the full archive if the victim does not pay.

Why This Matters for You and Your Family

When a medical provider’s internal files are stolen, the information often includes personal details that can be used to commit identity theft or medical fraud. Even though the exact contents remain undisclosed, internal files from an eye-care practice commonly contain patient names, dates of birth, addresses, Social Security numbers, insurance information, and clinical notes. Any parent whose child has visited the practice or any adult patient treated there should assume their information may now sit in an attacker’s archive. Once that data leaves the clinic’s control, it can surface on dark-web markets for years, increasing the chance that someone will attempt to open accounts, file false tax returns, or order medical services in your name.

Doxxing and Identity-Chain Risks

Stolen medical files rarely stay isolated. Attackers frequently combine them with credential leaks from other breaches to build detailed profiles. An email address allegedly taken from eyephy.com can be matched to gaming accounts, social-media handles, or school portals. This creates an identity chain that leads directly to you and your family. Children’s gaming accounts are especially vulnerable because kids often reuse passwords or email addresses tied to family medical records. A single exposed clinic file can therefore cascade into account takeovers, doxxing, and harassment that reaches every member of the household.

LockBit 3.0 Track Record

Public reporting attributes LockBit 3.0 as the latest iteration of a ransomware operation that first appeared in 2019 under the name LockBit. The group rebranded to LockBit 2.0 in 2021 and released version 3.0 in early 2022. Notable prior victims include large corporations, healthcare systems, and municipal governments. Their typical playbook begins with initial access through compromised remote desktop credentials or phishing, followed by rapid lateral movement, data exfiltration, and deployment of ransomware. After encryption, the operators extort the victim twice—once to obtain the decryptor and again to prevent publication of the stolen files. The group routinely uses leak sites hosted on the Tor network to pressure victims with public exposure.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used at eyephy.com or any affiliated patient portal anywhere else it is reused, and switch to 2FA through an authenticator app rather than text messages.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let the remediation specialists perform hands-on takedown requests across data brokers and extortion sites on your behalf.

The incident underscores that even specialized medical practices remain high-value targets for ransomware operators who monetize both encryption and data exposure. Protecting yourself requires more than changing a password; it demands ongoing visibility into how your information travels across the internet. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and over 100 platforms, AI-powered identity-chain mapping, and hands-on remediation by specialists, with household coverage that includes children’s gaming accounts vulnerable to credential-stuffing attacks that often follow leaks like this one.