Eyemart Express Hit by Ransomware Attack, Exposing Sensitive Customer Data Eyemart Express, a national optical retailer with nearly 250 stores across 42 states, has confirmed a ransomware attack that compromised sensitive customer and employee data. The Texas-based company, which operates under brands like Vision 4 Less and Eyewear Express, disclosed the breach to the Texas Attorney General on April 17, 2026, after the ransomware group Payouts King claimed responsibility on March 10, 2026. The attackers allegedly exfiltrated 435 GB of data, including corporate documents, financial records, and personal information. Confirmed exposed data includes: - Names - Addresses - Social Security numbers - Driver’s license numbers - Medical and health insurance details - Dates of birth Eyemart Express, founded in 1990, provides affordable eyewear with same-day service through its in-house labs. The incident has prompted legal investigations, with law firm Shamis & Gentile P.A. examining potential compensation claims for affected individuals. The full scope of the breach’s impact remains under review.

Eyemart Express, LLC was targeted in a cyber attack that affected its certain email accounts. Though the attack did not affect Eyemart Express’ internal systems that store medical or billing records but Eyemart Express immediately took steps to stop the attack and conducted a thorough investigation of the incident. The attack resulted in an unauthorized actor accessing limited personal information for a small number of Eyemart Express customers including names, e-mail addresses, and the subject lines of email communications between Eyemart Express and those customers, such as email subject lines regarding eye exam appointments and eyeglass order status updates.