Black Hills Regional Eye Institute Data Breach Lawsuit Investigation

Key Details of the Breach

• Incident detected: January 8, 2025
• Unauthorized access period: as early as January 4, 2025
• Breach confirmed: July 30, 2025
• Public notice & mail notifications: August 29, 2025
• Ransomware group involved: Qilin
• Data volume claimed: ≈ 200 GB

What Information Was Exposed?

• Full names
• Social Security numbers
• Dates of birth & dates of service
• Addresses & government ID numbers (e.g., driver’s license)
• Insurance details & medical record numbers
• Medical history, diagnoses, surgical and treatment information
• Medication lists & provider names
• Credit card or other payment information

Immediate Actions You Should Take

• Enroll in free credit monitoring: Black Hills Regional Eye Institute is offering Experian IdentityWorks to affected Social Security number holders.
• Review financial statements: Check bank, credit-card, insurance and medical billing statements for unfamiliar charges or services.
• Set a fraud alert or credit freeze: Contact any major credit bureau to add an extra layer of protection against new accounts opened in your name.
• Watch for phishing attempts: Scammers may impersonate the eye institute or insurers—verify before clicking links or sharing information.

Can You File a Data Breach Lawsuit?

If your personal or health information was compromised, you may have legal grounds to seek compensation for:

• Out-of-pocket expenses (credit monitoring, identity-theft protection, etc.)
• Time spent resolving fraud or securing accounts
• Emotional distress related to exposure of sensitive medical data

Data-breach litigation is currently being reviewed. Preserve all letters or emails you receive from Black Hills Regional Eye Institute and document any fraudulent activity to support a potential claim.

Download the Official Breach Notice

FAQ: Black Hills Regional Eye Institute Data Breach

How do I know if my data was involved in the Black Hills Regional Eye Institute breach?

The institute began sending written notifications on August 29, 2025. If you received a letter or email, your information was likely impacted. You can also call the contact number listed in the mailed notice for confirmation.

What credit monitoring is Black Hills Regional Eye Institute providing?

Eligible victims whose Social Security numbers were exposed are being offered Experian IdentityWorks at no cost for a limited period. Enrollment details are included in the notification letter.

Should I place a fraud alert or a credit freeze?

A fraud alert is free and lasts one year (seven years for identity-theft victims), instructing lenders to verify your identity. A credit freeze blocks new credit entirely until you lift it with a PIN. Victims of the Black Hills Regional Eye Institute breach may consider both for maximum protection.

Is medical identity theft a concern with this breach?

Yes. Because diagnostic, treatment and insurance information were among the stolen data, cybercriminals could attempt to obtain medical services or prescriptions in your name. Monitor Explanation of Benefits (EOB) statements and health-insurance claims closely.

What compensation might I recover in a lawsuit against Black Hills Regional Eye Institute?

Potential damages could include reimbursement for identity-theft expenses, credit-monitoring costs beyond what is offered, lost time, and emotional distress. Actual amounts depend on individual circumstances and the final outcome of any litigation.

How do I join a Black Hills Regional Eye Institute data breach lawsuit?

Collect your breach notice, keep records of any fraud, and consult an attorney experienced in data-privacy cases. Many offer free evaluations to determine eligibility.

Stay Informed and Protected

Breach investigations often reveal additional affected individuals over time. Revisit this page for updates and continue monitoring your accounts even if you haven’t detected suspicious activity yet.

Attorney Advertising. Prior results do not guarantee a similar outcome.