On August 9, 2020, Luxottica of America Inc. experienced a data breach due to an automated cyberattack, reported by the Washington State Office of the Attorney General on October 27, 2020. The incident compromised the personal information of approximately 12,166 individuals, including highly sensitive data such as names, Social Security numbers, and health-related records. The breach stemmed from an external cyber intrusion, exposing individuals to potential risks like identity theft, financial fraud, and unauthorized access to medical details. While the exact method of the attack (e.g., phishing, exploit of a vulnerability) was not specified, the scale and nature of the exposed data—particularly SSNs and health information—indicate a severe privacy violation with long-term repercussions for affected parties. The company was legally obligated to notify impacted individuals and regulatory bodies, though the broader operational or reputational consequences for Luxottica were not detailed in the report. The incident underscores the vulnerabilities in handling sensitive customer data, especially when automated cyberattacks exploit systemic weaknesses. No ransomware demands were mentioned, but the leak of personal and health data aligns with high-severity impacts under data protection frameworks.