Data Breach · Notice Sent

EyeMed Data Breach: Vision Plan Member File Emailed to the Wrong Address

Published November 15, 2026

EyeMed Vision Care is notifying vision plan members that a file containing names, addresses, dates of birth, Social Security numbers and member ID numbers was emailed to an incorrect address on September 22, 2026. EyeMed calls it human error and is offering free Kroll monitoring; no lawsuit over the incident had been identified as of November 15, 2026, and there is nothing to claim.

Eyeglasses displayed in an optical store
▼ Breach Notice · No Lawsuit Confirmed · Nothing to Claim

This page reports a data breach notice. EyeMed has not been found liable for anything, OCA has not identified a lawsuit over the breach, no class has been certified, and there is nothing to claim. This page is informational and is not legal advice.

What Is This About?

EyeMed Vision Care, LLC, which manages vision benefit plans for employers and insurers, is notifying plan members that their information was sent to the wrong person. EyeMed filed a sample of its notice with the California Attorney General on October 30, 2026.

According to the notice, on September 22, 2026 EyeMed sent a file containing member information to an incorrect email address. EyeMed says it identified the mistake the same day, concluded after a brief investigation that it was human error and not malicious, and confirmed that the incident was limited to that single email and that its systems, network and applications were not compromised. The notice does not say who received the email, whether the file was deleted or how many members were in it.

Status Notices Sent · Oct.–Nov. 2026 No lawsuit identified as of Nov. 15, 2026
Incident One email to a wrong address September 22, 2026 · EyeMed says systems not compromised
Free Monitoring Kroll identity monitoring Length and enrollment deadline printed in each letter
Can I Claim? No — nothing to claim yet

What Information Was Involved?

The notice says the file was a report about people enrolled in a particular vision benefit plan managed by EyeMed. The information varies by person but may include name, address, date of birth, Social Security number and member identification number. The notice does not mention eye exam, prescription or payment information.

What EyeMed Is Offering

EyeMed is offering complimentary Kroll identity monitoring, including credit monitoring, fraud consultation and identity theft restoration. The length of the membership and the enrollment deadline are merge fields in the sample notice, so they are stated in each member’s letter. EyeMed says it is revising its privacy and operations policies and retraining staff.

The notice also asks members to watch account statements, credit reports and Explanation of Benefits statements from health insurers. Federal law gives anyone notified of a breach free fraud alerts and security freezes through the three national credit bureaus; the Federal Trade Commission’s IdentityTheft.gov site explains how they work.

Has a Lawsuit Been Filed?

As of November 15, 2026, OCA had not identified a class action over the misdirected EyeMed email. Any claims would be allegations. OCA will update this page if a complaint is filed.

Questions

What happened in the EyeMed data breach?

According to EyeMed’s notice, on September 22, 2026 the company sent a file containing vision plan member information to an incorrect email address. EyeMed says it caught the error the same day, that it was human error rather than an attack, and that its systems were not compromised.

What information was in the EyeMed email?

The file contained information about people enrolled in a vision benefit plan managed by EyeMed. Depending on the person, it may have included name, address, date of birth, Social Security number and member identification number.

Was EyeMed hacked?

No, according to the notice. EyeMed says the incident was isolated to a single email sent to the wrong recipient and that its systems, network and applications were not compromised.

How do I sign up for EyeMed’s free Kroll monitoring?

The letter includes Kroll activation details and an enrollment deadline. The sample filed with the California Attorney General leaves the membership length and deadline blank, so each member’s letter states them.

Is there an EyeMed data breach class action?

OCA had not identified a filed class action over this incident as of November 15, 2026. There is no settlement, fund or claim form.

Sources

• California Attorney General — EyeMed Vision Care, LLC breach report and sample notice
• Federal Trade Commission — IdentityTheft.gov

For more class actions keep scrolling below.
Status Breach Notice Sent
Company EyeMed Vision Care, LLC
Incident Date September 22, 2026
Reported to California AG October 30, 2026
Free Monitoring Kroll; length and deadline in each letter

More Data Breach Coverage