Experience. Creativity. Legal Muscle.

Luxottica Data Breach Investigation

| Nov 19, 2020 | Firm News

Luxottica is the world’s largest eyewear company. It is the owner of many popular brands, such as Ray-Ban, Oakley, and Persol. It also operates the EyeMed Vision Care insurance benefits company and partners with LensCrafters, Target Optical, EyeMed, Pearle Vision, and other eye care providers. As the second largest vision benefits company in the United States, the EyeMed insurance platform has over 52,000,000 subscribers.[1]

What happened?

On August 9, 2020, Luxottica learned that it suffered a massive ransomware attack that exposed the sensitive health and personal information of at least 829,454 individuals.[2]

So far, it has been reported the data exposed in the breach includes patient names, contact information, appointment dates and times, health insurance policy numbers, appointment notes, doctors’ notes, information related to eye care treatment, health conditions, procedures, prescriptions, credit card numbers, and social security numbers.[3]

How did this happen?

Details of the data breach are still being investigated. However, there have been allegations that Luxottica recklessly maintained its customer and patient data on its computer network in a way that Luxottica knew was vulnerable to cyberattacks.[4]

What if I think my data may have been exposed or I received a notification about the data breach?

If you would like to have a free, confidential consultation with an attorney to learn more about your rights and potential legal remedies, please contact Markovits, Stock & DeMarco at (513) 651-3700, email us at [email protected], or submit a Case Evaluation request through the form below.

 

[1]http://www.luxottica.com/sites/luxottica.com/files/luxottica_group_relazione_finanziaria_annuale_2018_eng_20190410.pdf

[2] https://www.bleepingcomputer.com/news/security/luxottica-data-breach-exposes-820k-eyemed-lenscrafters-patients/

[3] https://www.hipaajournal.com/luxottica-data-breach-impacts-829454-individuals-in-the-united-states/

[4] See Doyle v. Luxottica of America, Inc., Case No. 1:20-cv-908, Doc. 1 (S.D. Ohio).