Simon Eye

Simon Eye Management operates as an optometry provider delivering eye care services to patients throughout the United States. The organisation conducts comprehensive eye examinations, prescribes corrective lenses, fits contact lenses, and diagnoses and treats a range of ocular conditions. Its services are designed to support routine vision health as well as more specialized medical eye care needs. By focusing on optometry, Simon Eye addresses both preventive vision maintenance and the management of eye‑related health issues for its clientele.

The scale of Simon Eye’s patient interaction is reflected in the 2021 data breach that affected approximately 144,000 individuals, indicating a substantial user base for its services. The breach involved unauthorized access to employee email accounts over a seven‑day period, exposing personal and medical information such as names, medical histories, treatment details, health insurance data, and for some individuals, Social Security numbers, dates of birth, and financial account information. This incident underscores the volume of sensitive data the organisation handles as part of its optometric practice. While the organisation’s headquarters is located in the United States, the exact number of clinics or geographic reach is not disclosed in the available sources.

Simon Eye’s distinguishing attributes centre on its specialization in optometry and the consequent responsibility to manage protected health information in accordance with healthcare privacy regulations. The organisation’s response to the breach included resetting passwords, implementing additional security measures, launching an investigation, and notifying affected individuals to monitor their accounts and consider fraud alerts. These actions demonstrate a focus on incident response and patient notification procedures aimed at mitigating potential harm. The attempted wire transfer and invoice manipulation attacks, although unsuccessful, further highlight the organisation’s exposure to financially motivated cyber threats targeting its email systems.