Kannarr Eye Care Listed by incransom Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On April 10, 2026, the ransomware group incransom listed Kannarr Eye Care on its leak site. The listing states that internal files were exfiltrated during a ransomware attack. The number of people affected has not been disclosed. The practical stakes center on the handling of patient information at a medical practice. When internal files from an optometry provider appear in such a listing, individuals who have received eye exams, purchased contact lenses, or undergone procedures face the possibility that their records have left the organization’s control.

Inside the incident

The only confirmed detail is the April 10, 2026 listing by incransom. The group claims to have obtained internal files. No information has been released about the date of the intrusion, the number of files taken, or the method used to gain access. The scale of the incident, including how many patient records may be involved, remains undisclosed.

Inside incransom

Incransom is a ransomware operator that maintains a leak site to publish data it claims to have stolen from victims. The group typically encrypts systems and then threatens to release exfiltrated material if a ransom demand is not met. Its listings are presented by the group itself and are not independently verified at the time they appear.

Kannarr Eye Care and its sector

Kannarr Eye Care operates as a full-service optometry provider in Pittsburg, Kansas. It provides eye exams, contact lens fittings, cataract surgery, and treatment for ocular diseases, serving patients across a four-state region. Organizations in this sector routinely collect and store medical histories, insurance details, and appointment records as part of routine care.

What data was at risk

The listing refers only to “internal files exfiltrated in ransomware attack.” No further inventory of data types has been published. Optometry practices commonly hold patient names, dates of birth, addresses, insurance information, and clinical notes from eye examinations. The precise contents of the files referenced in the listing are unconfirmed.

The real-world impact

Exposure of internal files from a medical practice can lead to misuse of personal and health information, including attempts at identity theft or insurance fraud. For the organization, the incident adds the administrative burden of investigating the access, notifying regulators if required, and restoring systems. Both outcomes depend on details that have not yet been made public.

Were you affected?

Individuals who are patients of Kannarr Eye Care can contact the practice directly for information on any notifications it may issue. Checking statements from health insurers and monitoring credit reports can reveal signs of misuse. Running a free exposure scan of an email address against known breach data provides one additional way to see whether the address has appeared in previously published listings.

AICompiled with AI assistance from public sources and published under our editorial standards.