Orem Eye Clinic Hit by Ransomware Attack, Exposing PHI of Nearly 6,000 Patients Orem Eye Clinic, an optometry practice in Orem, Utah, suffered a ransomware attack in early 2026, compromising the protected health information (PHI) of approximately 5,800 individuals. The breach was first publicly disclosed on January 26, 2026, when the ransomware group NightSpire claimed on the dark web to have exfiltrated 1 terabyte of data from the clinic. While the exact timeline of the attack and its discovery remains unclear, the stolen data may include names, addresses, dates of birth, Social Security numbers, medical records, diagnoses, treatment histories, prescription details, health insurance information, and billing records. The clinic reported the incident to the U.S. Department of Health and Human Services (HHS) on March 19, 2026, though further specifics about the compromised data have not been released. Affected patients were advised to contact Orem Eye Clinic directly for additional details. The full scope of the breach and its potential impact on individuals are still under investigation.