Incident BriefingsEyeMed misdirected member-file incident

EyeMed misdirected member-file incident

EyeMed Vision Care, LLC sent a member-information file to an incorrect email address on September 22, 2026, and identified the mistake that day.

Last modified

Summary

  • Environment: Vision-benefit member file sent by email
  • Operational impact: Member information sent to an incorrect recipient
  • Financial impact: No incident cost disclosed
  • Record status: Developing record. Reviewed November 4, 2026; updated as evidence emerges.

What happened

EyeMed Vision Care, LLC sent a member-information file to an incorrect email address on September 22, 2026, and identified the mistake that day. [1]

Impact

Depending on the individual, the file could include names, addresses, birth dates, Social Security numbers and member identifiers. [1]

Timeline

  1. Member file misdirected and error identified

    Member file misdirected and error identified, according to the published account. Incident notice.

    [1]

  2. Briefing updated

    This briefing was last reviewed and updated on November 4, 2026.

Threat Group & Attack Vector

EyeMed attributed the event to human error, described it as a single misdirected email and said its systems and applications were not compromised. [1]

Actors

  • The disclosure attributes this incident to an error; it does not identify a threat actor group.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

EyeMed said it would revise privacy and operational procedures, update training and retrain relevant staff. The notice offered identity monitoring. [1]