Eyemart Express Hit by Ransomware Attack, Exposing Sensitive Customer Data Eyemart Express, a national optical retailer with nearly 250 stores across 42 states, has confirmed a ransomware attack that compromised sensitive customer and employee data. The Texas-based company, which operates under brands like Vision 4 Less and Eyewear Express, disclosed the breach to the Texas Attorney General on April 17, 2026, after the ransomware group Payouts King claimed responsibility on March 10, 2026. The attackers allegedly exfiltrated 435 GB of data, including corporate documents, financial records, and personal information. Confirmed exposed data includes: - Names - Addresses - Social Security numbers - Driver’s license numbers - Medical and health insurance details - Dates of birth Eyemart Express, founded in 1990, provides affordable eyewear with same-day service through its in-house labs. The incident has prompted legal investigations, with law firm Shamis & Gentile P.A. examining potential compensation claims for affected individuals. The full scope of the breach’s impact remains under review.

Eyemart Express Reports Data Security Incident Affecting Customer Information Eyemart Express, a nationwide provider of optical and optometric services based in Texas, disclosed a cybersecurity incident involving unauthorized access to customer data. The company detected the breach on February 13, 2026, one day after the initial intrusion occurred on February 12, 2026. Following the discovery, Eyemart contained the incident, secured its systems, and launched an investigation. The exposed data includes sensitive customer information such as names, addresses, vision insurance details, dates of birth, eyeglass purchase records, prescriptions, and Social Security numbers. The company has begun notifying affected individuals by mail where addresses were available. Customers seeking further details can contact Eyemart at 1-800-655-4635. Eyemart is collaborating with law enforcement and has implemented additional security measures to prevent future incidents. The company is also offering credit monitoring services to customers whose Social Security numbers were compromised. While no specific threat actor has been identified, the incident highlights ongoing risks to personal data in the retail healthcare sector.

Eyemart Express, LLC was targeted in a cyber attack that affected its certain email accounts. Though the attack did not affect Eyemart Express’ internal systems that store medical or billing records but Eyemart Express immediately took steps to stop the attack and conducted a thorough investigation of the incident. The attack resulted in an unauthorized actor accessing limited personal information for a small number of Eyemart Express customers including names, e-mail addresses, and the subject lines of email communications between Eyemart Express and those customers, such as email subject lines regarding eye exam appointments and eyeglass order status updates.