Eyemart Express Reports Cybersecurity Incident Involving Customer Information

Eyemart Express is notifying customers and other individuals following a cybersecurity incident that may have exposed personal and health-related information.

The Texas-based optical retailer said it discovered on February 13 that an unauthorized party had accessed its computer systems the previous day. According to the company, the intrusion was contained and its systems were secured on February 12.

Eyemart then launched an investigation to determine what information may have been accessed and who was affected.

The type of data involved differs from person to person. For some customers, the affected information may include names, dates of birth, vision insurance details and eyeglass purchase or prescription records.

Other individuals may have had more sensitive information involved, including addresses, Social Security numbers, health plan information, eyeglass prescriptions and other personal data.

Eyemart said notification letters have been mailed to affected customers when a valid address was available. Anyone who has questions or believes they may have been affected but did not receive a letter can contact the company at 800-655-4635.

Complimentary credit monitoring is being offered to individuals whose Social Security numbers were involved. Instructions for enrolling are included in the notification letters sent by the company.

Eyemart said it is cooperating with federal law enforcement and reviewing its security training, internal processes and procedures. The company also said it is working to strengthen its safeguards and reduce the likelihood of a similar incident happening again.

Those who may be affected are encouraged to watch their financial accounts for unfamiliar activity and regularly review their credit reports. Free credit reports are available through AnnualCreditReport.com or by calling 1-877-322-8228.

Consumers should look for accounts they do not recognize, unfamiliar credit inquiries or incorrect information such as addresses, birth dates and payment histories. Suspicious activity can be reported to the appropriate credit reporting agency, the Federal Trade Commission or a state attorney general’s office.