An optical coherence tomography (OCT) scan is a non-invasive imaging test that uses light waves to create detailed cross-sectional images of structures in the eye, such as the retina. Eye-care professionals use these images to assess and monitor eye conditions.
OCT images can reveal sensitive health information and may be linked to a patient’s identity or clinical records. In cyber security, they should be protected like other medical data: restrict access to diagnostic imaging systems and archives, secure backups, and include these repositories in breach-response and recovery plans. In extortion incidents, attackers may claim to have stolen imaging alongside records; such claims should be investigated without assuming the files are authentic or complete.