HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
EyeMed Vision Benefits
bd_cf86ae44e1360d1c · schema v1 · pii pii-v1
Full breach record for EyeMed Vision Benefits →EyeMed Vision Care LLC reported an unauthorized access incident occurring between June 24, 2020, and July 1, 2020. The breach affected approximately 2,329,942 individuals, including 23,057 Maine residents. The incident involved the acquisition of Social Security Numbers and personal identifiers. EyeMed notified affected individuals in writing on September 28, 2020, and offered identity theft protection services.
Maine clockDiscovered Jul 1, 2020 → Filed with AG Nov 30, 2020152d ✗ ME AG >90d22 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_34d1a19c2cb74c79California State AGfiled 2020-12-11(11d gap)Verified
- bd_dd7329e4945257eeDelaware State AGfiled 2020-12-11(11d gap)Verified
- bd_03f6bce6b4d9bc45South Carolina State AGfiled 2021-01-27(58d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bfc4bbf8-8fab-4264-9880-37d9a08aae5e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 30, 2020
- Raw hash
- fab716ec65155ad6b286f020d1958315726bea2550703094fda990b1e4365080
Reporting entity
- Name
- EyeMed Vision Benefitsnorm: eyemed vision benefits
- Domain
- eyemed.com
Victim entity
- Name
- EyeMed Vision Benefitsnorm: eyemed vision benefits
- Domain
- eyemed.com
Incident
- Discovered
- Jul 1, 2020
- Materiality determined
- —
- Notification sent
- Sep 28, 2020
- Affected individuals
- 2,329,942
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(152 days from discovery to filing)
- Compliance flags
- ME AG >90d · 152dME resident >60d · 89d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 1, 2020→ Filed with AG: Nov 30, 2020152d 90 days ME AG >90d Maine Discovered: Jul 1, 2020→ Notified: Sep 28, 202089d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.