A ransomware attack attributed to the Abyss group surfaced on February 2, 2025 affecting Century Vision Global, a U.S.-based eye-care acquisition and management services organization, along with three affiliated clinic websites: independenceeye.com, kocheye.com, and prairieeyecenter.com. Century Vision Global serves as the parent management services provider for these clinics, which means a single compromise at the central support layer cascades into every affiliated practice.\n\nThe exposed data covered approximately 41,800 records, including names, email addresses, phone numbers, home addresses, and Social Security numbers. Because the affected entities are healthcare providers, additional protected health information including treatment, diagnostic, and insurance records may also have been compromised, although the published field set focuses on identity and contact data. No payment-card or banking exposure has been publicly reported.\n\nFor affected patients, the practical risk is identity theft and medical-identity fraud. The combination of name, home address, and Social Security number is a strong base for fraudulent credit applications, tax-return fraud, and insurance abuse. Anyone notified by Century Vision Global, Independence Eye, Koch Eye Associates, or Prairie Eye Center should treat their Social Security number as exposed, freeze credit at all three U.S. bureaus, and remain alert to suspicious medical billing or insurance correspondence. People should also be cautious of any unsolicited contact referencing past eye-care appointments or treatment, since attackers can use such pretexts to extract additional information.

Vision-care providers collect customer or patient identity, contact, prescription, appointment, billing, and service records tied to optical products and eye-care services.

The breach surfaced when the Abyss ransomware group listed Century Vision Global and three affiliated eye-care websites on its dark-web leak page on February 2, 2025. Century Vision Global has not issued a detailed public statement about the incident and has not appeared on the U.S. Department of Health and Human Services public breach portal under that exact name as of early 2026. One affiliated practice, Koch Eye Associates of Rhode Island, was named separately in mid-2025 in connection with another Abyss-linked exfiltration claim of approximately 313 GB of data, suggesting either a delayed disclosure of the same incident or a follow-on attack.