In March 2026, Eyemart Express, an optical retailer with nearly 250 stores in 42 states, experienced a ransomware data breach. The Payouts King group claimed responsibility, accessing 435 GB of data. The company began notifying affected individuals on April 17, 2026.
The compromised data includes names, addresses, Social Security numbers (SSN), driver's license numbers, dates of birth, medical information, and health insurance information. While ransomware claims mention financial documents and payroll reports, specific consumer financial accounts have not been explicitly confirmed as exposed. The total number of affected individuals has not been publicly specified, but the breach affected individuals nationwide where Eyemart Express operates.
It is important to note that details can emerge or change as investigations proceed, and notification periods may vary.