Eye Buy Direct

Disclosed Jan 25, 20197 years ago756,322 affectedConfirmed

What is known

People affected	756,322 (as reported by the organization)
Disclosed	Jan 25, 2019
Discovered	Jun 1, 2019
Happened	Sep 1, 2018
Attack	Hacking
Data exposed	Names, Payment cards, Financial
Sector	Healthcare · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: Eye Buy Directoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: Eye Buy Directatg.wa.gov · Official notice	Official notice
Oregon DOJ breach notice: Eye Buy Directjustice.oregon.gov · Official notice	Official notice
Indiana Attorney General 2019 data breach report: Eye Buy Directin.gov · Official notice	Official notice
Maine Attorney General breach notice archive: Eye Buy Directmaine.gov · Official notice	Official notice

Where	Filed	People
Maine AGresidents of ME	Jan 25, 2019	8
Indiana AGresidents of IN	Mar 18, 2019	16
Indiana AGresidents of IN	Oct 14, 2019	4
Washington AGresidents of WA	Oct 15, 2019	17,031
California AGresidents of CA	Oct 18, 2019
Oregon DOJresidents of OR	Oct 18, 2019	756,322
Maine AGresidents of ME	Oct 18, 2019	4,120

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Oct 13, 2015Oct 13, 201510 years ago	Oct 13, 201510 years ago	Not stated	Healthcare	Confirmed	Unknown

History of this record

2026-09-25 · disclosed: 2019-03-18 to 2019-01-25 · backfill source
2026-09-25 · data_types: [] to ["names","payment-card","financial"] · backfill source
2026-09-25 · records: 12833 to 756322 · backfill source
2026-09-25 · disclosed: 2019-10-14 to 2019-03-18 · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 12833 · backfill source
2026-09-25 · disclosed: 2019-10-15 to 2019-10-14 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · disclosed: 2019-10-18 to 2019-10-15 · backfill source
2026-09-25 · discovered: empty to 2019-06-01 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.