EyeMed Vision Benefits

EyeMed Vision Care LLC notified South Carolina residents of a data breach occurring between June 24 and July 1, 2020. An unauthorized individual accessed an EyeMed email mailbox and sent phishing emails to contacts in the address book. EyeMed secured the mailbox, engaged a cybersecurity firm, reset passwords, and provided two years of free identity monitoring via Kroll. Personal information of vision benefit recipients may have been accessed.

Aetna (via EyeMed) reported a data breach affecting vision benefit recipients. An unauthorized individual accessed an EyeMed email mailbox on June 24, 2020, and sent phishing emails to the address book. Access was terminated on July 1, 2020. Personal information of individuals receiving vision benefits may have been viewed or copied. EyeMed engaged a cybersecurity firm, reset passwords, and provided two years of free identity monitoring via Kroll.

EyeMed, a vision benefits administrator, disclosed a data breach where an unauthorized individual accessed an EyeMed email mailbox and sent phishing emails to contacts in the address book. Access occurred from June 24, 2020, to July 1, 2020. EyeMed discovered the incident on July 1, 2020, blocked access, and engaged a cybersecurity firm. Personal information of individuals receiving vision benefits may have been viewed or copied. EyeMed implemented password changes, security training, and provided two years of free identity monitoring via Kroll.

EyeMed Vision Care LLC reported an unauthorized access incident occurring between June 24, 2020, and July 1, 2020. The breach affected approximately 2,329,942 individuals, including 23,057 Maine residents. The incident involved the acquisition of Social Security Numbers and personal identifiers. EyeMed notified affected individuals in writing on September 28, 2020, and offered identity theft protection services.

EyeMed Vision Care LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2020-10-12. The breach occurred during 6/24/2020 - 7/1/2020. The breach was discovered on 7/1/2020. 547,370 individuals were affected. Notice was sent on 10/12/2020.

EyeMed Vision Care LLC, a health sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2020-07-01 and filed notice on 2020-10-12. 19,625 Washington residents were affected. 103 days elapsed between awareness and notification. 7 days to identify the breach. 0 days to contain the breach.

EyeMed Vision Care LLC reported a phishing incident where an unauthorized individual accessed an email mailbox from June 24 to July 1, 2020. The attacker sent phishing emails to contacts in the mailbox. Personal information of vision benefit recipients may have been accessed. EyeMed secured the account, engaged forensic investigators, reset passwords, and provided two years of identity monitoring services.

EyeMed Vision Care reported a data breach to the Montana Attorney General. The breach was reported on 2020-09-28. The breach occurred from 6/24/2020 to 7/1/2020. 2,153 Montana residents were affected.

EyeMed Vision Care LLC reported an unauthorized access incident occurring between June 24, 2020, and July 1, 2020. The breach affected 54,266 individuals, including 23 Maine residents. Compromised data included names and Social Security Numbers. EyeMed provided two years of complimentary identity monitoring through Kroll, including credit monitoring and fraud consultation. The investigation was ongoing as of the filing date of September 28, 2020.