Eyemart Express

Disclosed May 12, 2026189,450 affectedConfirmed

What is known

People affected	189,450 (as reported by the organization)
Disclosed	May 12, 2026
Discovered	Mar 17, 2026
Happened	Feb 13, 2026
Attack	Hacking
Data exposed	NamesHealthSocial Security numbersInsurancePayment cardsFinancialDates of birthAddressesGovernment IDs
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Eyemart Express

Official noticeatg.wa.gov

Washington Attorney General breach notice: Eyemart Express

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Eyemart Express

Official noticeocrportal.hhs.gov

HHS OCR breach report: Eyemart Express (Healthcare Provider, TX)

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005190: Eyemart Express

Official noticeago.vermont.gov

Vermont Attorney General breach report: Eyemart Express

Official noticein.gov

Indiana Attorney General 2026 data breach report: Eyemart Express

Notices filed

Residents of ORMay 12

Oregon DOJ250 people

TotalMay 18

HHS OCR25,000 people

Residents of INJul 15

Indiana AG2,637 people

Residents of TXJul 21

Texas AG45,460 people

Residents of CAJul 24

California AGCount not stated

Residents of WAJul 24

Washington AG1,704 people

Residents of VTJul 24

Vermont AG1 person

Residents of ORAug 4

Oregon DOJ2,638 people

History of this record

source2026-10-07

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdfby weeklySource

source2026-09-25

empty to https://ago.vermont.gov/categories/security-breach-noticesby backfillSource

data_types2026-09-25

["names","health","ssn","insurance","payment-card","financial","dob","addresses"] to ["names","health","ssn","insurance","payment-card","financial","dob","addresses","government-id"]by backfillSource

data_types2026-09-25

["names","health"] to ["names","health","ssn","insurance","payment-card","financial","dob","addresses"]by backfillSource

records_basis2026-09-25

hhs to organizationby backfillSource

records2026-09-25

25000 to 189450by backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 25000by backfillSource

disclosed2026-09-25

2026-07-24 to 2026-05-12by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2026-03-17by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Eyemart Express