EyeMed

Disclosed Jan 24, 20222,100,000 affectedSettled

Phished email account exposed 2.1M members' health data; USD 600,000 NY AG

In 2020 attackers gained access to an EyeMed email account holding six years of emails and attachments with names, addresses, Social Security numbers, insurance IDs and medical information of about 2.1 million people. EyeMed paid New York USD 600,000.

What is known

People affected	2,100,000 (as reported by the organization)
Disclosed	Jan 24, 2022
Attack	Phishing
Data exposed	NamesAddressesSocial Security numbersInsuranceHealth
Sector	Insurance · US
Status	Settled
Lawsuit or fine	USD 600,000 NY AG agreement (Jan 2022) (about $600K)

Sources

Regulatorag.ny.gov

NY AG: USD 600,000 agreement with EyeMed after 2020 data breach

Notices filed

TotalJan 24, 2022

Research2,100,000 people

Other breaches at EyeMed

Breach, details not statedExposed names, health records and insurance details. Reported to the Delaware DOJ.484K affectedHealthcareUSDec 11, 2020

History of this record

Added2026-09-25

First recordedby seedSource

First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.

Everything about EyeMed