Security News > 2020 > November > Luxottica data breach exposes LensCrafters, EyeMed patient info

This post was originally published on November 7th. A Luxottica data breach has exposed the personal and protected health information of 829,454 patients at LensCrafters, Target Optical, EyeMed, and other eye care practices.

In a "Security Incident" notification issued this week, Luxottica disclosed that their appointment scheduling application suffered a data breach after being hacked on August 5th, 2020.

"On August 9, 2020, Luxottica learned of the incident, contained it, and immediately began an investigation to determine the extent of the incident. On August 28, 2020, we preliminarily concluded that the attacker may have accessed and acquired patient information," the Luxottica data breach notification states.

Luxottica is not aware of any misuse of the accessed data but advises all patients to watch out for notices from their health insurers or health care providers and monitor their credit statements and history for fraudulent activity.

All affected users should have been This data breach comes on the heels of a recent Nefilim ransomware attack on Luxottica that occurred on September 18th, 2020, and caused significant outages, interruptions, and theft of unencrypted files.

News URL

https://www.bleepingcomputer.com/news/security/luxottica-data-breach-exposes-lenscrafters-eyemed-patient-info/