On April 22, 2024, Optometric Physicians of Middle Tennessee appeared on the leak site operated by the bianlian ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the eye-care provider, which operates OPMT Vision Centers across Tennessee. The disclosure does not quantify how many patients or employees may be affected, nor does it list the specific data types contained in the stolen files.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Optometric Physicians of Middle Tennessee
Get alerted the next time Optometric Physicians of Middle Tennessee files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Optometric Physicians of Middle Tennessee’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details from the Leak-Site Listing
The bianlian leak site explicitly names opmt.com and claims the organization suffered a ransomware incident resulting in data exfiltration. As of the publication date, the group had not posted samples of the stolen material. The notification does not specify the volume of records involved, the exact date of initial compromise, or the systems that were encrypted or accessed. Public views of the onion listing state only that internal files were taken and that the matter remains unresolved from the attacker’s perspective.
Why This Matters for You and Your Family
If you or any member of your household has visited an OPMT Vision Center for routine exams, vision therapy, low-vision rehabilitation, or dry-eye treatment, your personal information may now sit in an attacker-controlled archive. Medical-related records frequently contain names, dates of birth, Social Security numbers, insurance details, and clinical notes. Even when the leak-site listing does not detail what was taken, the exposure of internal files from a healthcare provider creates immediate risk of identity theft, insurance fraud, and long-term financial harm for you and your family.
The Doxxing and Identity-Chain Risk
Stolen internal files rarely exist in isolation. A single spreadsheet linking patient names to phone numbers, email addresses, or insurance IDs can be combined with other breached data to build detailed profiles. Attackers chain these records across platforms, linking your healthcare identity to social-media handles, children’s school accounts, or family addresses. Credential leaks of this nature often cascade into gaming-account takeovers, especially for households where children use the same email addresses for both medical portals and online games. The result is a widening doxxing chain that can expose your family’s daily routines, locations, and financial data.