Kannarr Eye Care Data Breach: Patient Files Accessed in March 2026

Kannarr Eye Care says it identified unauthorized access to certain systems within its network on March 30, 2026. The practice says it moved right away to secure and contain the incident and brought in independent cybersecurity and forensic investigators.

That investigation found that an unauthorized actor had accessed files holding personal and health information for some patients. Kannarr reported the breach to the U.S. Department of Health and Human Services on May 28, 2026, where it’s listed as a hacking incident involving a network server.

According to the practice’s notice, the files may have included names, Social Security numbers, medical information and health insurance information. Not every item was involved for every person, and each letter spells out what applied to that recipient.

Kannarr says it has no evidence that any information has been misused. Even so, a Social Security number paired with insurance details is the kind of combination that can be used to open accounts or bill for care in someone else’s name.

The HHS listing counts 14,003 people. Kannarr’s notice describes the information as relating to patients, and the practice’s website lists offices in Pittsburg, Girard and Fort Scott.

We didn’t find a filing for this incident with the attorneys general in California, Massachusetts, Texas or Vermont, so there’s no public state-by-state breakdown of where those patients live.

After its investigation, Kannarr reviewed the affected files to work out whose information was involved and to find current addresses, a process it says ended on August 17, 2026. It mailed letters on September 17, nearly six months after the access was discovered.

The practice says it has since strengthened its security measures, added technical safeguards and tightened its cybersecurity policies. Its website notice also serves as notice for people it couldn’t reach because it had no valid mailing address for them. The notice doesn’t mention credit monitoring, so check your letter for any offer.

Because the notice lists Social Security numbers alongside medical and insurance information, these steps cover both identity and billing fraud:

• Find your September 17 letter. It names the specific details involved for you.
• Check statements from your health and vision plans. Flag any exams, glasses, contacts or procedures you never received.
• Freeze your credit at Equifax, Experian and TransUnion. It’s free and keeps new accounts from being opened with your Social Security number.
• Pull your free credit reports. Look for accounts or inquiries you don’t recognize.
• Moved recently? Letters went only to people with a valid mailing address, so a missing letter doesn’t necessarily mean your information wasn’t involved.

These steps are general information, not legal advice; a legal professional can explain how they apply to you.

Did a letter from Kannarr Eye Care say your Social Security number or health information may have been accessed? Wilshire Law Firm, a nationally recognized, award-winning firm, reviews data privacy cases involving medical records, and breaches at healthcare practices are sometimes pursued as class actions. A free consultation or free case review with a legal professional is available 24/7, and there are no fees unless you get paid.

Reach out to Wilshire Law Firm to discuss your letter.