On March 9, 2026, the IncRansom ransomware group added tupeloeye.com to its public leak site, claiming that it had exfiltrated internal files from Tupelo Eye Clinic and its affiliated optical shop in Mississippi.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch tupeloeye.com
Get alerted the next time tupeloeye.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about tupeloeye.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
What Public Reporting Shows
Public reporting indicates the clinic, which employs about 50 people and generates roughly $5 million in annual revenue, was hit in a ransomware incident. The exposed material consists of internal files rather than a narrowly defined set of customer records. The leak site posting includes basic business details such as the address at 610 Brunson Drive, phone number (662) 844-7211, and the names of the three physicians who practice there: Joseph J. Chappell, M.D., William C. Brawner, M.D., and Lee H. Walker, M.D.
Available reporting describes the incident as a classic ransomware operation in which attackers first gain access, encrypt systems, and then threaten to publish stolen data unless a ransom is paid. No confirmed victim count for individual patients or employees has been published. The posting on the IncRansom leak site serves as both proof of compromise and a public shaming tactic to pressure the clinic.
Why This Matters for You and Your Family
When a local medical provider’s internal files appear on a ransomware leak site, anyone who has ever been a patient there has reason for concern. Medical offices routinely store names, dates of birth, Social Security numbers, insurance details, addresses, phone numbers, and clinical notes. Even if the full dataset has not been widely circulated yet, its mere availability on a criminal site increases the chance that your personal health information could be sold or used in follow-on fraud.