Vision Care Providers Settle Data Breach Class Actions After Patient Data Exposures Two vision care providers Total Vision in California and Naper Grove Vision Care in Illinois have reached settlements in class action lawsuits following cyberattacks that compromised sensitive patient data. ### Total Vision Settlement Total Vision LLC, which operates optometry centers across California, suffered a hacking incident on or around October 30, 2020, when attackers accessed a database containing patient information, including names, addresses, dates of birth, Social Security numbers, and prescription details. The breach affected 138,402 current and former patients and was reported to the HHS’ Office for Civil Rights. Two class action lawsuits were consolidated into Ramey, et al. v. Total Vision, LLC, et al. in the Superior Court of California, County of San Diego, alleging negligence, breach of implied contract, and violations of California’s unfair competition law, Confidentiality of Medical Information Act, and security notification laws. Plaintiffs claimed the breach led to attempted identity theft and data misuse, though the defendants denied wrongdoing. The settlement, finalized after mediation on November 21, 2023, includes: - A $475,000 settlement fund, covering attorneys’ fees, administrative costs, and class member benefits. - Reimbursement of up to $1,000 per class member for documented losses. - Pro rata cash payments for those not claiming losses, depending on valid claims. - $224,000 in improved data security measures by the defendants. - Deadlines: Exclusion/objection by September 4, 2026, claims by October 5, 2026, and a final fairness hearing on December 18, 2026. ### Naper Grove Vision Care Settlement Naper Grove Vision Care in Naperville, Illinois, experienced a May 2025 ransomware attack by the Interlock group, which accessed protected health information of 20,093 individuals, including names, addresses, birth dates, driver’s license numbers, insurance details, medical records, and some Social Security numbers. The breach was detected on May 24, 2025. Multiple lawsuits were consolidated into In re Naper Grove Data Breach Litigation in the Circuit Court of the Eighteenth Judicial Circuit, DuPage County, Illinois, alleging negligence, breach of implied contract, and violations of the Illinois Consumer Fraud and Deceptive Business Practices Act. The defendant denied all claims. The settlement includes: - A $50,000 settlement fund for pro rata cash payments or reimbursement of up to $1,000 per class member for documented losses. - A one-year credit and medical data monitoring service for all class members. - Deadlines: Exclusion/objection and claims by September 18, 2026, with a final approval hearing on October 20, 2026. Both settlements were reached without admission of fault or liability.

Total Vision Settles $475,000 Class Action Over 2020 Data Breach Total Vision LLC has agreed to a $475,000 settlement to resolve a class action lawsuit stemming from a data breach on October 30, 2020, which exposed the personal and medical information of 88,722 current and former patients and individuals. The breach prompted allegations that the company failed to adequately protect sensitive data, violating California’s Confidentiality of Medical Information Act and other state laws. Eligibility & Claims California residents who received a direct mail notice about the breach may file a claim for compensation. Class members can seek: - A pro rata cash payment from the remaining settlement fund after deductions for administrative costs, legal fees, and service awards. - Reimbursement of up to $1,000 for documented out-of-pocket expenses linked to the breach, including identity theft losses, card replacement fees, and credit monitoring services purchased after February 28, 2022. Claims must be submitted online or by mail to the settlement administrator (ILYM Group Inc.) by September 14, 2026, using the ILYM ID and claim ID from the notice. Approved payments will be distributed via PayPal, Venmo, Zelle, or paper check approximately 90 days after the court’s final approval, scheduled for December 18, 2026. Settlement Fund Breakdown The $475,000 fund allocates: - Up to $100,250 for settlement administration costs. - Up to $158,333.33 in attorneys’ fees. - Approximately $22,000 for attorneys’ expenses. - $10,000 total in service awards for class representatives. - The remaining balance for approved claimants. Company Response & Security Measures While Total Vision denies wrongdoing, the settlement requires the company to implement enhanced data security measures for at least two years, valued at over $224,000 annually. The agreement aims to resolve litigation without further legal costs or uncertainty.