Cyber Incident Victim: Eyemart Express, LLC
Date:
Feb 2026
Location:
United States of America
Summary
Eyemart Express disclosed a cybersecurity breach in which unauthorized access to its systems exposed personal information that varied by individual and could include names, addresses, dates of birth, Social Security numbers, health plan details, vision insurance data, and eyeglass purchase or prescription records; the intrusion was detected, the prior day's access was contained the same day, systems were secured, and an investigation was launched. Headquartered in Farmers Branch and operating more than 250 stores across 42 states, the company mailed notification letters to affected individuals when addresses were available, provided a contact phone line, and offered free credit monitoring to those whose Social Security numbers were compromised while reviewing and updating internal training, processes, and procedures and cooperating with federal law enforcement; it also advised affected individuals to monitor account statements and credit reports for unfamiliar accounts, incorrect personal information, or suspicious inquiries and to contact the relevant reporting agency or the Federal Trade Commission if issues were found.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Eyemart Express, headquartered in Farmers Branch, Texas, operates more than 250 stores across 42 states. On February 13, 2026, the company learned that its systems had been accessed without authorization on February 12, 2026. The breach was identified, contained the same day, systems were secured, and an investigation was launched. The compromised data varied by individual and could include names, addresses, dates of birth, Social Security numbers, health plan details, vision insurance information, and eyeglass purchase or prescription records.
Eyemart Express mailed notification letters to affected individuals where an address could be determined. Individuals can call (800) 655‑4635 to confirm whether they were affected. The company is providing free credit monitoring to those whose Social Security numbers were involved. Eyemart Express officials said they are reviewing and updating internal training, processes, and procedures, and are cooperating with federal law enforcement.
The company encourages individuals to monitor account statements and review credit reports for signs of identity theft or fraud. When reviewing credit reports, impacted individuals should look for unfamiliar accounts, incorrect personal information, or suspicious inquiries. If issues are found, individuals are directed to contact the reporting agency using the information provided with the report and to consult the Federal Trade Commission for guidance on identity theft, fraud alerts, and security freezes. CBS News Texas will provide updates as more information becomes available.