Smart Eye Care Listed by Booba Team Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On September 23, 2026, the ransomware group known as Booba Team listed Smart Eye Care, an optometry practice associated with the website www.smarteyecare.com, on its leak site. The listing claims that roughly 7 GB of material was taken. Public detail is limited: the number of people who might be affected is unknown, and the listing does not describe what kinds of files or records are involved. Smart Eye Care has not publicly confirmed the claim as of writing. A leak-site post is an extortion claim, not an independent verification that systems were compromised or that any particular records left the organisation.

For patients and staff who use or work with an eye-care practice, such a claim matters because practices in this sector routinely handle identity, contact, and clinical information. Until the organisation or a regulator speaks, the responsible approach is to treat the listing as unverified, understand what is and is not established by it, and take proportionate steps if personal data might later prove to have been involved.

Inside the listing

According to the Booba Team listing, Smart Eye Care appears as a named victim entry tied to the optometrists’ website www.smarteyecare.com. The group claims “stolen data” amounting to 7 GB. The listing does not state how many individuals could be affected, does not name categories of data, and does not describe a method of intrusion, a timeline of alleged access, or any proof package beyond the volume figure and the organisational label. Timing of the alleged activity itself is undisclosed; only the date the listing was reported—September 23, 2026—is given in the available record.

Nothing in the public summary confirms that files were copied, that the claimed volume is accurate, or that the material is authentic rather than recycled, incomplete, or misattributed. Leak-site posts are part of a pressure campaign. They establish that a group chose to name an organisation and attach a size claim; they do not, by themselves, establish a verified breach inventory.

Who is Booba Team?

Booba Team is known publicly as a ransomware and extortion crew that operates in the familiar double-extortion pattern used by many such groups: encrypt or disrupt systems where they can, exfiltrate data where they claim to have done so, and threaten publication on a dedicated leak site if payment is not made. Like peer crews, it relies on naming victims, asserting that data was taken, and using the prospect of exposure to coerce negotiation. Public reporting on the group has generally described leak-site listings, countdown-style pressure, and claims about data volumes rather than detailed technical write-ups released for every victim.

For this specific entry, only what appears in the listing record should be attributed to the group: that it has named Smart Eye Care, linked the practice’s website, and claimed about 7 GB of data. No further statements by Booba Team about this organisation—such as file inventories, sample documents, or intrusion narratives—are included in the facts at hand. Prior activity by the group elsewhere does not prove that this particular claim is true.

Smart Eye Care and its sector

Smart Eye Care is presented in the listing as an optometry-related organisation with an online presence at www.smarteyecare.com. Optometry and similar outpatient eye-care practices sit in a sector that combines clinical care with routine administrative and billing work. Patients typically provide identity and contact details, insurance or payment information, appointment history, prescriptions for lenses or treatments, and notes related to vision exams and ocular health. Staff records, vendor correspondence, and internal schedules are also common in small and mid-sized clinical offices.

A credible incident affecting such a practice would be consequential because the data mix is both personal and partly medical in character, and because patients often reuse the same identifiers across healthcare and financial relationships. That consequence, however, depends on whether records were actually taken and what they contained—points that remain unconfirmed while the only public source is an extortion listing.

What was likely exposed

The facts state that data types named as exposed are not disclosed. The Booba Team listing asserts a volume of about 7 GB and does not publish a breakdown of fields, document types, or systems. It is therefore not possible to state as fact that clinical charts, billing files, identity documents, or any other specific category left the organisation.

If files from an optometry practice were taken, organisations of this kind typically hold some combination of patient demographics, contact information, insurance identifiers, appointment and billing records, refraction and prescription data, and limited clinical notes, along with employee and operational records. That is a description of sector norms, not an inventory of this claim. The exact contents tied to the Smart Eye Care listing remain unconfirmed, and the 7 GB figure alone does not reveal what proportion—if any—would be sensitive personal data versus generic or non-personal material.

Why it matters

Extortion listings create practical uncertainty for people who may have been patients or staff. If personal information were later shown to have been involved, risks could include targeted phishing that references eye-care or insurance details, attempts to open accounts with stolen identity elements, or misuse of contact data for scams. Medical-adjacent information can make social-engineering messages more convincing even when the clinical content itself is limited.

For the organisation, a public naming on a leak site can mean reputational pressure, patient inquiries, and possible regulatory attention depending on jurisdiction and on whether a reportable incident is eventually established. None of that converts the listing into proof. What the listing establishes is the claim and the claimed volume; what it does not establish is confirmation, scope, data categories, or fault. Readers should separate the existence of an accusation from conclusions about negligence or security design—those conclusions are not supported by the thin public record here.

If your data was involved

If you are a patient or employee and you worry this claim could touch you, proceed on a conditional basis. Watch for unexpected emails or messages that cite eye exams, prescriptions, or insurance and that push you to click links or share codes. Consider placing fraud alerts with major credit reporting services if you have reason to believe identity data might be at risk, and review statements for unfamiliar activity. Use unique passwords and multi-factor authentication on email and patient-portal accounts so a single exposed credential is less useful. If Smart Eye Care or a regulator later issues guidance, follow that notice over informal leak-site claims.

You can also run a free exposure scan of your email address to check whether your information has already surfaced in known breach datasets unrelated to this listing. That check does not confirm or deny this specific claim, but it can highlight credentials or addresses that need attention. Until there is clearer public confirmation, treat Booba Team’s listing as an unverified allegation and keep any response measured and practical.

AICompiled with AI assistance from public sources and published under our editorial standards.