EyeMed
Disclosed Jan 24, 20224 years ago2,100,000 affectedSettled
Phished email account exposed 2.1M members' health data; USD 600,000 NY AG
In 2020 attackers gained access to an EyeMed email account holding six years of emails and attachments with names, addresses, Social Security numbers, insurance IDs and medical information of about 2.1 million people. EyeMed paid New York USD 600,000.
What is known
| People affected | 2,100,000 (as reported by the organization) |
|---|---|
| Disclosed | Jan 24, 2022 |
| Attack | Phishing |
| Data exposed | Names, Addresses, Social Security numbers, Insurance, Health |
| Sector | Insurance · US |
| Status | Settled |
| Lawsuit or fine | USD 600,000 NY AG agreement (Jan 2022) (about $600K) |
Sources
| Source | |
|---|---|
| NY AG: USD 600,000 agreement with EyeMed after 2020 data breachag.ny.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Jan 24, 2022 | 2,100,000 |
Other breaches at EyeMed
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Dec 11, 2020Dec 11, 20205 years ago | Dec 11, 20205 years ago | Not stated | Healthcare | Confirmed | 484K |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.