Incident

Black Hills Regional Eye Institute reports ransomware attack


Learn More

Black Hills Regional Eye Institute, an eye care provider located in Rapid City, South Dakota, is reporting a ransomware attack that exposed sensitive patient information. 

On January 8, 2025, Black Hills Regional Eye Institute detected suspicious activity within its network. The investigation confirmed that patient information was accessed and stolen.

The cyberattack was claimed by the Qilin ransomware group. The hackers alleged they had obtained 200 GB of the institute's data. The exposed data includes:

  • Names
  • Dates of birth
  • Social Security numbers
  • Dates of service
  • Driver's license numbers
  • Insurance information
  • Diagnostic treatment information
  • Medical record numbers
  • Medical histories
  • Medication treatment locations
  • Medications
  • Provider names
  • Surgical information
  • Credit card information

The number of impacted individuals is not disclosed.

Black Hills Regional Eye Institute publicly reported the incident on Aug. 29, 2025 and is notifying affected individuals by mail. The eye care organization is offering individuals whose Social Security numbers were compromised free credit monitoring services. 

Black Hills Regional Eye Institute reports ransomware attack