DisclosureLens
GLOBALMalwareHealthcareHealthcareRansomwareDragonforceRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

Owen Leigh Optometry

bd_187ed8dcb1bdcb23 · schema v1 · pii pii-v2

Severity

High

Discovered

Filed

Sep 16, 2026

To disclose

Affected

Not disclosed

Confidence

50%
Full breach record for Owen Leigh Optometry

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group DragonForce on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: HealthcareDiscovered: 2026-09-16

Source: Ransomware.live

Post text · scraped from the leak site

Full DATA 400 GB+ The brain uses the eyes to gather information about our surroundings. The brain cannot process all our view so it must first decide what to look for. The eyes-brain system then has to select that information, usually by shifting eye position and often by shifting focus. How the eyes-brain go through this process is the real test of visual efficiency. Here at Owen Leigh Optometry, we specialise in helping patients of all ages to develop flexibility in their vision to meet all their needs and interests. We start this by observing and measuring your eye-brain system with a wide range of visual challenges. Eye health and eyesight are important, but this must not be the end point of developing good vision. We want to take you much further than that, to explore ways that you can see more, feel more, move better, plan better and understand quicker. ​ We use 'visual efficiency glasses', vision exercises (vision therapy) and 'training/learning lenses' to help you develop your own vision. We add visual hygiene, consider coloured lenses and refer to other disciplines if that will help you meet your goals. “What we see is dependant upon what we are looking for and what we managed to see last time.”

Incident timeline — mostly unverified

? — ?

Breach window unknown

Sep 16, 2026

Claim posted

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Claim → filing

Compliance clock

Not assessable

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.

Source ceiling

  • actor name
  • victim claim
  • ransom/leak status
  • discovery date
  • materiality
  • notification
  • affected count
  • confirmed data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2022-10-20

dragonforce

According to ransomware.live, DragonForce is a major ransomware-as-a-service operation first observed in August 2023 that launched a formal affiliate program offering 80% revenue share, then rebranded as a "ransomware cartel" in 2025, gaining notoriety for high-profile attacks on UK retailers Marks & Spencer, Co-op, and Harrods.

681 tracked hereFull profile →