Georgia Eye Institute investigating network “unusual activity”; cybersecurity expert weighs in

Georgia Eye Institute investigating network “unusual activity”; cybersecurity expert weighs in

Georgia Eye Institute investigating network “unusual activity”; cybersecurity expert weighs in

https://www.wtoc.com/2026/07/08/georgia-eye-institute-investigating-network-unusual-activity-cybersecurity-expert-weighs/

Publish Date: 2026-07-08 18:33:00

Source Domain: www.wtoc.com

Author:

Using an unordered list, summarize the following article with between 4 and 8 key points. SAVANNAH, Ga. (WTOC) -Georgia Eye Institute confirms it is investigating what it describes as “unusual activity” detected within its network last month.In a statement to WTOC, Georgia Eye Institute said it discovered the activity on June 11 and immediately took steps to protect its systems.“On June 11, 2026, we detected unusual activity within our network. Immediately upon discovery, we took steps to ensure the security of our environment and isolate impacted systems. We are working with our IT professionals and outside experts to restore our systems as quickly as possible and investigate this incident. The investigation remains ongoing and will take some time to complete.”The institute has not said what caused the unusual activity or whether any patient information has been accessed. WTOC followed up with additional questions but has not yet received a response.Robert Sexton, department chair of Cybersecurity and Computer Information Systems at Savannah Technical College, says “unusual activity” is a broad term commonly used during the early stages of a cybersecurity investigation.He says the company appears to be taking appropriate initial steps by isolating affected systems and bringing in cybersecurity experts while investigators determine exactly what happened.“The first step in a cyber investigation is to contain the attack,” Sexton said. “At the same time, you’re preserving evidence. Then investigators determine what systems were affected and what user accounts may have been compromised.”Sexton says if investigators determine patient information was accessed or stolen, the company could have legal obligations to notify those affected within a certain timeframe. Until then, he recommends patients monitor their credit, insurance accounts and watch for any unexpected insurance claims.Georgia Eye Institute says patient care has continued despite the technology issues.“Our primary focus has been, and continues to be, the safe care of our patients. While we continue the process of restoring our technology systems, Georgia Eye Institute has maintained patient care through established downtime procedures that enable our physicians and clinical teams to continue providing medical services.”The investigation remains ongoing.Copyright 2026 WTOC. All rights reserved.