AOA, an eye care practice in Alabama, suffered a ransomware attack between January 22–30, 2025, compromising 131,576 individuals. The breach exposed highly sensitive data, including names, Social Security numbers, health insurance details, medical records, treatment histories, biometric data, and emails. The BianLian ransomware group claimed responsibility, threatening to publish stolen data unless demands were met. While AOA confirmed the breach, it did not disclose whether a ransom was paid or if credit monitoring was offered. The attack disrupted operations and risked long-term identity theft, financial fraud, and reputational damage. Given the scale of exposed patient health and financial records, the incident poses severe compliance risks (e.g., HIPAA violations) and operational disruptions, potentially eroding trust in the healthcare provider. The breach’s impact extends beyond data loss, threatening patient safety if critical systems were compromised during the attack.