HOYA Optical Labs of America
Disclosed Jun 11, 20215 years ago14,099 affectedConfirmed
The business associate (BA), HOYA Optical Labs of America, reported that it experienced a ransomware attack affecting the protected health information (PHI) of 14,099 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, financial information, and prescription information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA strengthened its administrative and technical safeguards and provided complimentary credit monitoring services to affected individuals.
What is known
| People affected | 14,099 (as reported to HHS) |
|---|---|
| Disclosed | Jun 11, 2021 |
| Happened | Mar 15, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: HOYA Optical Labs of Americaoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: HOYA Optical Labs of Americain.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Hoya Optical Labs of America (Business Associate, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jun 11, 2021 | |
| Indiana AGresidents of IN | Jun 11, 2021 | 22 |
| California AGresidents of CA | Dec 28, 2021 | |
| HHS archivetotal | Dec 29, 2021 | 14,099 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 3259 to 14099 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), HOYA Optical Labs of America, reported that it experienced a ransomware attack affecting the protected health information (PHI) of 14,099 individuals. The PHI involved included names, dates of birth, addresses, · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 3259 · backfill source
- 2026-09-25 · disclosed: 2021-12-28 to 2021-06-11 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.