---
title: "EyeMed misdirected member-file incident"
description: "EyeMed Vision Care, LLC sent a member-information file to an incorrect email address on September 22, 2026, and identified the mistake that day."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-11-04"
canonical_url: "https://www.ally.security/incidents/eyemed-misdirected-member-file-2026"
markdown_url: "https://www.ally.security/incidents/eyemed-misdirected-member-file-2026.md"
stix_url: "https://www.ally.security/incidents/eyemed-misdirected-member-file-2026/stix.json"
---

# EyeMed misdirected member-file incident

EyeMed Vision Care, LLC sent a member-information file to an incorrect email address on September 22, 2026, and identified the mistake that day.

Last modified Nov 4, 2026 · 1 source

## Summary

- **Environment:** Vision-benefit member file sent by email
- **Operational impact:** Member information sent to an incorrect recipient
- **Financial impact:** No incident cost disclosed

## What happened

[EyeMed Vision Care, LLC](https://www.eyemed.com/) sent a member-information file to an incorrect email address on September 22, 2026, and identified the mistake that day. [1](#source-1)

## Impact

Depending on the individual, the file could include names, addresses, birth dates, Social Security numbers and member identifiers. [1](#source-1)

## Timeline

### September 22, 2026 — Member file misdirected and error identified

Member file misdirected and error identified, according to the published account. [Incident notice](https://oag.ca.gov/system/files/EyeMed%20Individual%20Notice%20Template.pdf). [1](#source-1)

### November 4, 2026 — Briefing updated

This briefing was last reviewed and updated on November 4, 2026.

## Threat Group & Attack Vector

EyeMed attributed the event to human error, described it as a single misdirected email and said its systems and applications were not compromised. [1](#source-1)

### Actors

- The disclosure attributes this incident to an error; it does not identify a threat actor group.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

EyeMed said it would revise privacy and operational procedures, update training and retrain relevant staff. The notice offered identity monitoring. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/eyemed-misdirected-member-file-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### EyeMed Vision Care, LLC data security notice

official · EyeMed Vision Care, LLC

<https://oag.ca.gov/system/files/EyeMed%20Individual%20Notice%20Template.pdf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Affected Organization · 100% confidence · current**  
   EyeMed misdirected member-file incident: EyeMed Vision Care, LLC
2. **Discovered At · 100% confidence · current**  
   EyeMed misdirected member-file incident: 2026-09-22
3. **Resulted In · 100% confidence · current**  
   EyeMed misdirected member-file incident: Depending on the individual, the file could include names, addresses, birth dates, Social Security numbers and member identifiers.
4. **Resulted In · 100% confidence · current**  
   EyeMed misdirected member-file incident: Member file misdirected and error identified
5. **Resulted In · 100% confidence · current**  
   EyeMed misdirected member-file incident: EyeMed said it would revise privacy and operational procedures, update training and retrain relevant staff. The notice offered identity monitoring.
6. **Occurred At · 100% confidence · current**  
   Member file misdirected and error identified: 2026-09-22
7. **Resulted In · 100% confidence · current**  
   EyeMed misdirected member-file incident: EyeMed attributed the event to human error, described it as a single misdirected email and said its systems and applications were not compromised.
8. **Resulted In · 100% confidence · current**  
   EyeMed misdirected member-file incident: EyeMed Vision Care, LLC sent a member-information file to an incorrect email address on September 22, 2026, and identified the mistake that day.

</details>