Almeida Law Group is investigating a data breach at New Century Ophthamology P.C. If you were affected, contact Almeida Law Group.
About New Century Ophthamology P.C.
New Century Ophthalmology, PC — also operating as NCO Eye Center — is a regional ophthalmology practice founded in 2001 by Vinod K. Jindal, MD, FACS. The practice provides comprehensive eye care services, including cataract, retina, glaucoma, oculoplastic, and refractive surgery, as well as routine ophthalmic exams and facial aesthetic services. It is headquartered in Oxford, North Carolina, with an additional office in Raleigh, NC. Because the practice provides medical care and handles insurance billing, it maintains sensitive patient records including health information, insurance data, and personal identifiers — the types of information confirmed to have been involved in this incident.
What Happened?
New Century Ophthamology P.C. was listed in a Vermont Attorney General breach report summary dated November 4th, 2026. According to the company’s own breach notification letter filed with the Massachusetts Attorney General, the practice became aware of unauthorized activity within certain of its systems on August 18th, 2026. The practice took containment steps including changing passwords, terminating the unauthorized access, and enhancing monitoring. An investigation conducted with data security professionals determined that the unauthorized activity included the copying of certain data from its systems. The Vermont AG filing identifies the breached data categories as Social Security numbers, government ID numbers, and health records. Per the company’s notification letter and additional reporting, the exposed information may include names, addresses, dates of birth, Social Security numbers, driver’s license numbers, medical information (including diagnoses and medications), and health insurance information. The degree of information exposed varied by individual. The breach was reported to the Vermont Attorney General on November 4th, 2026.
Separately, the INC Ransom (Incransom) ransomware group posted a claim of responsibility for an attack on New Century Ophthalmology Group on its dark web leak site around August 31st, 2026 — approximately 13 days after the company states it discovered the unauthorized activity. This is an unverified attacker allegation. New Century Ophthalmology’s own breach notification letter describes the incident only as unauthorized activity involving data copying and does not mention ransomware. The leak-site posting lacked detail on proof files, exfiltration scope, or confirmed data categories, and no independent source has confirmed ransomware involvement. As of November 2026, attorneys working with ClassAction.org are investigating whether a class action lawsuit can be filed on behalf of affected individuals, but no lawsuit has been filed.
Key Facts at a Glance
- Company or Organization: New Century Ophthamology P.C. (also operating as NCO Eye Center)
- Industry: Health Care — Ophthalmology
- Location: Oxford, North Carolina (with additional offices in Raleigh, NC)
- Incident type: Unauthorized access and data copying
- Date breach discovered: August 18th, 2026
- Date of consumer notification: November 4th, 2026
- Litigation status: Pre-filing investigation underway; no lawsuit filed as of November 2026
- Source: Vermont Attorney General Breach Notice, Massachusetts AG Breach Notification Letter, ClassAction.org Investigation, Ransomware.live — Incransom claim
What Should You Do?
If you received a notification letter from New Century Ophthalmology, review it carefully to understand exactly what information of yours was involved. Because health records, Social Security numbers, and government ID numbers were confirmed in this breach, you should place a fraud alert or credit freeze with all three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your credit reports at AnnualCreditReport.com. If identity theft occurs, report it at IdentityTheft.gov for a personalized recovery plan. Because medical information was involved, also review your Explanation of Benefits statements from your health insurer and request copies of your medical records to check for any services you do not recognize. If the company offered identity theft protection services, enroll promptly and note any enrollment deadline stated in your notification letter.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
