EyeMed data breach settlement

From Settlements, in the HARD wiki · Updated
This article is about the class action settlement over the EyeMed data breach. For every settlement, see Settlements.

Yes. The EyeMed data breach settlement is real: a $5 million class action settlement in federal court, Southern District of Ohio, run by Kroll Settlement Administration. The claim deadline, 11 December 2025, has passed and the judge’s final decision has not been posted.

Claims closed on December 11, 2025 and the final approval hearing was set for January 7, 2026. HARD could not confirm the judge’s decision from the court or the official site.

Is it real?

Yes. The case is Tate, et al. v. EyeMed Vision Care, LLC, case number 1:21-cv-36 (docketed as 1:21-cv-00036-DRC), in the United States District Court for the Southern District of Ohio. The court appointed Kroll Settlement Administration to run it, and its only official site is eyemeddatasettlement.com.

How the real notice reached people. Kroll emailed the Short Notice, with a link to the claim form, to every class member EyeMed had an email address for, and mailed a postcard with a tear-off claim form to everyone else. Each notice had a Class Member ID, in the email or on the postcard. The sender email address is not published.

To tell a real message from a scam:

  1. The only official site is eyemeddatasettlement.com.Type it into your browser yourself rather than tapping a link. Claim pages on news and lawyer-advertising sites, and lookalike addresses, are not the administrator.
  2. Filing costs nothing.No real settlement charges a fee to file a claim or to release a payment. Anyone asking for one is running a scam.
  3. Nobody needs your passwords.The administrator never asks for your EyeMed password, your online banking login or a code texted to you. Payment details go only into the claim form on eyemeddatasettlement.com.
  4. Check by phone.If you aren’t sure a message is real, call the administrator on (833) 621-8389, the number on eyemeddatasettlement.com, not one in the message.
  5. Claims have closed.The deadline was 11 December 2025. A message now urging you to file a new claim, or to pay or “verify” your bank details to receive money, is a warning sign. Check on eyemeddatasettlement.com instead.

Who qualifies

People residing in the United States to whom EyeMed issued notice that their Personal Data was impacted in the June 2020 Data Incident. The judge and family, EyeMed and its related entities, officers, directors and employees, and people who opted out are excluded.

Size: approximately 2.1 million people (New Jersey Attorney General); the class notice gives no count.

It covers people in the United States only. If you live elsewhere, you are not part of it, whatever a message says.

How much

The total settlement is $5,000,000. What each person can claim:

BenefitAmountNotes
Pro Rata Cash Payment$50 (estimated)increased or decreased pro rata after losses, lost time, fees and costs; paid on top of the $10,000 cap
Lost Timeup to $100 ($25 per hour for up to 4 hours)attested time spent dealing with the incident; counts toward the $10,000 cap
Out-of-Pocket Expensesup to $10,000documented, unreimbursed losses incurred on or after June 24, 2020, such as fraud, credit freezes, credit monitoring, professional fees

An amount marked estimated or pro rata changes with the number of valid claims: more claims, smaller shares. Losses need proof, such as receipts or bank statements.

Deadline and payout

  • Claim deadline: (passed).
  • Opt-out and objection deadline: .
  • Final approval hearing: .

Payout. The administrator has not published a payment date. The notice says payments are made after final approval and any appeals.

The administrator: “your Class Member ID is on the envelope or postcard.”

Filing and payment

  1. Claims closed on 11 December 2025; new claims can no longer be filed.
  2. Questions go to Kroll at (833) 621-8389 or P.O Box 225391, New York, NY 10150-5391.
  3. The official site is www.eyemeddatasettlement.com.

Official site: eyemeddatasettlement.com. Phone: (833) 621-8389. Mail: Tate v EyeMed Vision Care LLC, c/o Kroll Settlement Administration LLC, P.O Box 225391, New York, NY 10150-5391.

The breach, and what to do today

In June 2020 an unauthorized person got into an EyeMed email account and may have accessed files with customers' personal and health insurance details. The New Jersey Attorney General says several employees shared one password to that account and about 2,000 phishing emails were then sent from it.

What was exposed: names; contact details; dates of birth; health insurance account and identification numbers; Medicaid or Medicare numbers; driver's licenses; other government identification numbers.

A settlement pays for what already happened. The data is still out there, so do these now:

  1. Freeze your credit.In the US it’s free at Equifax, Experian and TransUnion, and no one can open credit in your name while it’s on. Lift it for a day when you apply for credit yourself.
  2. Get an IRS Identity Protection PIN.It stops anyone filing a tax return in your name with your Social Security number. Request one at irs.gov/ippin.
  3. Read your health insurance statements.Check each Explanation of Benefits for care you never had, and tell your insurer if you find any. Medical records can’t be changed like a password.
  4. Distrust messages about EyeMed and this settlement.Breach data is used to make scam messages personal enough to believe, for years afterwards. Go to the company or the official site yourself.

To see which other breaches your email address is in, search it on Have I Been Pwned, then read Breaches.

Not published yet

The administrator and the court had not published these when HARD checked on 7 November 2026, so this page doesn’t guess:

  • When payments will be sent.
  • Whether the judge has granted final approval (the hearing was set for 7 January 2026).

Questions

Is the EyeMed data breach settlement legit?

Yes. It is Tate, et al. v. EyeMed Vision Care, LLC, case 1:21-cv-36 (docketed as 1:21-cv-00036-DRC), in the United States District Court for the Southern District of Ohio. Kroll Settlement Administration runs it for the court, and the only official site is eyemeddatasettlement.com.

Who qualifies for the EyeMed settlement?

People residing in the United States to whom EyeMed issued notice that their Personal Data was impacted in the June 2020 Data Incident. The judge and family, EyeMed and its related entities, officers, directors and employees, and people who opted out are excluded.

How much will I get from the EyeMed settlement?

Up to up to $10,000 for losses you can prove, or $50 (estimated) as a cash payment without receipts. The total settlement is $5,000,000. Final amounts depend on how many valid claims there are.

What is the deadline for the EyeMed settlement?

The claim deadline was 11 December 2025. It has passed.

When will the EyeMed settlement pay out?

The administrator has not published a payment date. The notice says payments are made after final approval and any appeals.

Other settlements: California Casualty, Finastra, Telmate, Covenant Health, AMCA, DaVita, and the rest in Settlements.

Sources

Checked on 7 November 2026. HARD is not part of the case and doesn’t take claims.

  1. Long Form Notice (court-approved copy), US District Court, S.D. Ohio filing (copy hosted by ClassAction.org), read 7 Nov 2026: fund, data types, benefits, deadlines, hearing date, Kroll address and phone.
  2. Settlement Agreement with exhibits (Doc. 47-1, filed 06/18/25), US District Court, S.D. Ohio filing (copy hosted by ClassAction.org), read 7 Nov 2026: notice plan (email, else mail), Class Member ID wording on claim form.
  3. AG Platkin announces $2.5 million multistate settlement with EyeMed (16 May 2023), New Jersey Office of the Attorney General, read 7 Nov 2026: about 2.1 million affected; shared password; phishing emails; data types including Social Security numbers.