20/20 Eye Care Network

Disclosed May 24, 20214,142,440 affectedConfirmed

The covered entity (CE), 20/20 Eye Care Network, reported that it experienced a cyber-attack that affected the electronic protected health information (ePHI) of 4,142,440 individuals. The ePHI involved included names, addresses, Social Security numbers, and health insurance and claims information. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In its mitigation efforts, the CE offered complimentary credit monitoring services and strengthened its technical safeguards to better protect its PHI.

What is known

People affected	4,142,440 (as reported to HHS)
Disclosed	May 24, 2021
Discovered	Jan 11, 2021
Happened	Jan 11, 2021
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: 20/20 Eye Care Network

Official noticeatg.wa.gov

Washington Attorney General breach notice: 20/20 Eye Care Network

Official noticejustice.oregon.gov

Oregon DOJ breach notice: 20/20 Eye Care Network

Official noticein.gov

Indiana Attorney General 2021 data breach report: 20/20 Eye Care Network

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): 20/20 Eye Care Network (Business Associate, FL)

Notices filed

TotalMay 24, 2021

HHS archive4,142,440 people

Residents of WAMay 28, 2021

Washington AG690 people

Residents of INMay 28, 2021

Indiana AG1,546 people

Residents of CAMay 29, 2021

California AGCount not stated

Residents of ORMay 29, 2021

Oregon DOJ3,253,822 people

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

3253822 to 4142440by backfillSource

disclosed2026-09-25

2021-05-28 to 2021-05-24by backfillSource

summary2026-09-25

empty to The covered entity (CE), 20/20 Eye Care Network, reported that it experienced a cyber-attack that affected the electronic protected health information (ePHI) of 4,142,440 individuals. The ePHI involved included names, addresses, Social Secuby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 3253822by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

disclosed2026-09-25

2021-05-29 to 2021-05-28by backfillSource

discovered2026-09-25

empty to 2021-01-11by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about 20/20 Eye Care Network