How do I know if I am affected by the The Center for Advanced Eye Care data breach?

The Center for Advanced Eye Care is mailing notification letters directly to affected individuals. If you have received care or services from The Center for Advanced Eye Care in the period leading up to February 2026 and you have not received a letter, contact the entity directly. 9,300 individuals were confirmed affected in the HHS OCR filing.

What data was exposed in the The Center for Advanced Eye Care breach?

According to the notification letter and supporting filings, the compromised data included: Full name, Date of birth, Social Security number, Medical information.

Was The Center for Advanced Eye Care attacked by a ransomware group?

Yes — the Frenshyny Open-web forum data-theft actor claimed responsibility for the attack on The Center for Advanced Eye Care. The stolen data was posted publicly on a dark-web leak site.

What is HealthConsent and how does it help with the The Center for Advanced Eye Care breach?

HealthConsent is an independent health-data privacy service. We help affected individuals stop the ongoing flow of their health information by filing HIPAA restriction requests, FTC Health Breach Notification Rule deletion requests, and state-law deletion requests across providers, insurers, Health Information Exchanges, prescription networks, and data brokers. Credit monitoring offered by The Center for Advanced Eye Care addresses identity-theft risk; HealthConsent addresses the longer-tail problem of your exposed health data continuing to be sold and shared by other entities downstream.

Active breach tracker Wilmington, DE Disclosed February 20, 2026

Center for Advanced Eye Care Data Breach 2026: 9,300 Ophthalmology Patients Exposed. Stolen Data Listed for Sale on Open Web. What To Do

Q: Should I file a lawsuit over the The Center for Advanced Eye Care data breach?

3 plaintiffs' firms have publicly announced investigations or filed complaints related to the The Center for Advanced Eye Care breach: Cole & Van Note (publicly investigating), Ahdoot & Wolfson (publicly investigating), Bryson Harris Suciu & DeMay (publicly investigating). We are not a law firm and cannot give legal advice; consult your own attorney to evaluate your options.

The Center for Advanced Eye Care, a Wilmington, Delaware ophthalmology practice serving Delaware and southeast Pennsylvania, disclosed in February 2026 a December 2025 network intrusion exposing names, Social Security numbers, dates of birth, and medical information for 9,300 patients. Threat actor 'Frenshyny' listed stolen data for sale on an open-web forum. Cyberscout monitoring offered. Here is what to do.

You have options. Scroll for the exact action steps, what your provider’s response covers, and what your health data needs beyond credit monitoring.

By HealthConsent Editorial Last updated May 15, 2026 Sources & methodology

Timeline

Dec 14, 2025

Threat actor 'Frenshyny' advertises stolen data for sale on open-web forum

Dec 16, 2025

Practice discovers unauthorized access to legacy environment

Feb 13, 2026

Notification list completed

Feb 20, 2026

Public notice filed (Vermont AG); notification letters issued

Dec 14, 2025

Threat actor 'Frenshyny' advertises stolen data for sale on open-web forum

Dec 16, 2025

Practice discovers unauthorized access to legacy environment

Feb 13, 2026

Notification list completed

Feb 20, 2026

Public notice filed (Vermont AG); notification letters issued

Data exposed

High-risk identity

Enables financial + identity theft

Date of birth Social Security number

Contact & insurance

Phishing + targeted scams

Full name Medical information

Class actions filed by

These firms have publicly announced investigations. You may be eligible to join. We are not a law firm and cannot give legal advice.

Cole & Van Note (publicly investigating) Ahdoot & Wolfson (publicly investigating) Bryson Harris Suciu & DeMay (publicly investigating)

If you received a letter

Your action plan, in five steps.

You have more rights than the notification letter explains. Each step below is a concrete thing you can do today. Full detail and timing in the sections that follow.

Accept credit monitoring

It’s the floor of the response. Take it.

Freeze your credit

Free at Equifax, Experian, TransUnion.

File IRS Form 14039

Prevent fraudulent tax return under your SSN.

Review your EOBs

Insurance statements catch medical identity theft early.

Stop the ongoing flow

Credit monitoring doesn’t cover your health records. HealthConsent does.

Jump to step 5: protect my health data

What happened

The Center for Advanced Eye Care is a multi-physician ophthalmology group headquartered at 5301 Limestone Road, Suite 122, Wilmington, Delaware, with a Langhorne, Pennsylvania satellite office. Subspecialties include pediatric ophthalmology, cataract surgery, LASIK/PRK, oculoplastics, glaucoma, and cornea/refractive surgery.

On December 14, 2025, a threat actor using the handle “Frenshyny” publicly advertised stolen data on an open-web forum, claiming the records contained ID, name, sex, DOB, location, and more. The practice discovered the unauthorized access on December 16, 2025. The compromise was scoped to a legacy system rather than current PACS or imaging infrastructure.

The notification list was completed February 13, 2026. The Vermont AG filing and individual notification letters issued February 20, 2026 — confirming 9,300 affected individuals.

The practice’s notice does not name Frenshyny; the attribution comes from independent reporting of the open-web sale listing.

What was stolen

Full name
Date of birth
Social Security number
Medical information

Retinal imaging, OCT scans, and fundus photographs are not mentioned in the notice. Exposure appears scoped to legacy demographic and clinical record content rather than the current imaging archive.

What the Center for Advanced Eye Care is offering

Complimentary single-bureau credit monitoring, credit report, and credit score via Cyberscout (TransUnion)
Duration not specified in public sources
Legacy system secured; third-party cybersecurity firm engaged

What to do

Enroll in Cyberscout through the activation code in your letter.
Place free credit freezes at Equifax, Experian, TransUnion. Full SSN is in scope.
File IRS Form 14039.
Be aware your data was listed for sale on an open-web forum by Frenshyny. The data is likely in the wild.
Stop the ongoing flow of your ophthalmology data. HealthConsent files HIPAA restriction requests so the demographic and clinical data exposed in this breach is not continuously re-shared.

Continue reading

Stop your data from spreading further

Credit monitoring covers your wallet. HealthConsent covers your health records.

Your stolen diagnoses, test results, and medical record numbers don’t expire when the free credit-monitoring window ends. HealthConsent automates HIPAA restriction requests and opt-outs across providers, insurers, HIEs, and prescription networks so the data taken in this breach can’t keep being shared and sold by other entities downstream.

Protect my health data

Cancel anytime · Family plan covers spouses + dependents

Sources & further reading

Official HHS OCR Breach Portal: ocrportal.hhs.gov

About this page

This page is compiled from public regulatory filings, the breached entity’s own disclosures, and reporting from established healthcare-privacy outlets. Some sections are assembled with the help of automated research and may contain errors, summaries that lag the underlying source, or details that have since been revised. Treat it as a starting point, not legal advice or an authoritative record. If you spot something inaccurate, the linked sources above are the canonical record. For questions about your individual situation, contact the breached entity directly or consult a licensed attorney.