Luxottica

Luxottica is an Italian-headquartered global eyewear conglomerate operating across manufacturing, retail, and insurance services. The company designs, produces, and distributes optical frames, sunglasses, and lenses through a portfolio that includes the luxury brand Ray-Ban and numerous retail chains such as LensCrafters, Sunglass Hut, Target Optical, and Pearle Vision. Through its subsidiary EyeMed, Luxottica also provides vision care insurance and administers benefit plans, positioning it as a vertically integrated entity controlling much of the eyewear supply chain from production to consumer point-of-sale and coverage. Its operations serve a worldwide customer base, encompassing both prescription eyewear and non-prescription sunglasses, with a retail presence that includes physical stores and online portals for its various brands. This structure allows Luxottica to influence pricing, distribution, and market trends across the optical industry.

The company's scale is evident in its multinational footprint and the volume of sensitive consumer data it manages, including personal and health information through EyeMed's insurance services and retail appointment systems. A significant data breach incident in 2020, involving the Nefilim ransomware gang, confirmed the exfiltration of personal data affecting over 829,000 individuals, underscoring the vast data repository under its control. Luxottica's role as a dominant player in eyewear manufacturing and retail, combined with its insurance operations, subjects it to various data protection regulations and makes it a high-value target for cyber threats. The 2020 ransomware attacks, which exploited a critical Citrix vulnerability (CVE-2019-19781), caused worldwide operational disruptions, including website outages for major brands and the closure of offices in Italy and China, demonstrating the interconnected nature of its global IT infrastructure. These incidents highlight the company's reliance on complex digital systems to support its extensive retail network, manufacturing logistics, and healthcare-related data processing, while also revealing vulnerabilities within its cybersecurity posture despite its market-leading position.