If you were a member of EyeMed or a vision plan through Aetna or Ameritas, you may have been affected by a security incident that occurred several years ago. Data breaches are increasingly common, but they can be stressful and confusing for those whose personal information is at risk. Following the EyeMed security incident, a class-action settlement was established to provide compensation and protections to affected individuals. This guide explains the details of the breach, who is eligible for benefits, and the steps you need to take to secure your claim.
Understanding the EyeMed Data Breach
The EyeMed data breach occurred in mid-2020 when an unauthorized individual gained access to an EyeMed email account. This account contained sensitive personal information belonging to millions of current and former vision plan members. The company discovered the incident in August 2020 and began notifying affected individuals shortly thereafter.
The information exposed in the breach varied by individual but potentially included names, addresses, dates of birth, and phone numbers. In some cases, more sensitive data such as Social Security numbers, health insurance member numbers, and limited medical information was also accessible. Because of the nature of this data, a legal settlement was reached to address the concerns of those whose privacy was compromised.
Who Is Eligible for the Settlement?
Eligibility for the EyeMed data breach settlement generally applies to individuals who received a notice regarding the security incident. This includes members of EyeMed, Aetna, and Ameritas vision plans whose data was stored in the compromised email account.
Determining Your Status
If you are unsure whether you are part of the settlement, you can usually verify your status by looking for a settlement notice sent via mail or email. These notices often contain a Unique ID or Claimant ID, which is required to access the online filing portal. If you no longer have your notice, you can contact the settlement administrator to check if your name is on the list of affected individuals.
- Class Members: Anyone in the United States whose personal information was impacted by the EyeMed breach.
- Subclass Members: Certain states may have specific subclasses with additional protections based on local privacy laws.
Steps to File Your Claim
Filing a claim is the only way to receive monetary compensation or specific services offered through the settlement. The process is designed to be straightforward, but it requires careful attention to detail and adherence to deadlines. Follow these steps to ensure your claim is processed correctly.
1. Visit the Official Settlement Website
Settlement administrators set up a dedicated website for every major class-action case. This site serves as the central hub for all information, including court documents, frequently asked questions, and the online claim form. Always ensure you are on the official site to avoid scams or third-party services that may charge a fee.
2. Enter Your Unique ID
Most claimants receive a notice containing a unique identification code. Entering this code on the settlement website will pre-populate some of your information and verify your eligibility. If you do not have a code, the website usually provides an option to file a claim manually by providing your personal details.
3. Select Your Benefits
The settlement typically offers several types of benefits. You will need to choose the one that best fits your situation. Common options include:
- Reimbursement for Out-of-Pocket Expenses: If you spent money on credit monitoring, identity theft insurance, or other costs directly related to the breach, you can claim reimbursement.
- Compensation for Time Spent: Many settlements allow you to claim a set hourly rate for time spent dealing with the effects of the breach, such as calling banks or setting up credit freezes.
- Credit Monitoring Services: You may be eligible for several years of free credit monitoring and identity restoration services.
4. Provide Documentation
If you are claiming reimbursement for specific financial losses, you must provide documentation. This could include receipts, bank statements, or invoices showing the costs you incurred. For claims regarding time spent, you may need to provide a brief description of the actions you took.
5. Submit and Save Confirmation
Once you have completed the form and uploaded any necessary documents, submit the claim. Be sure to save the confirmation number or print the confirmation page for your records. This serves as proof that you filed your claim before the deadline.
Types of Compensation Available
The EyeMed settlement was structured to provide different levels of relief depending on how much the breach affected you. Understanding these categories helps you maximize the benefit you receive from the settlement fund.
Ordinary Loss Reimbursement
Ordinary losses include expenses like bank fees, communication charges, and credit report costs. Most settlements cap these losses at a specific dollar amount per person. If you have kept records of these small expenses, include them in your claim to ensure you are fully reimbursed.
Extraordinary Loss Reimbursement
In cases where identity theft actually occurred as a result of the breach, individuals may be eligible for much higher compensation. Extraordinary losses cover actual identity theft losses that have not been reimbursed by other sources. These claims require significant documentation, such as police reports or detailed correspondence with financial institutions.
Attested Time
Even if you didn’t lose money, you likely lost time. The settlement allows you to claim a specific number of hours (often up to 4 or 5 hours) spent protecting your identity. You usually do not need receipts for this, but you must attest under penalty of perjury that the time was spent addressing breach-related issues.
What Happens After You File?
After the filing deadline passes, the settlement administrator begins the process of reviewing all submitted claims. This can take several months. If your claim is deficient—meaning it is missing information or documentation—the administrator will usually contact you and give you an opportunity to fix the issue.
Once all claims are verified, the court must grant “Final Approval” to the settlement. If there are appeals, the process can be delayed further. Payments are typically distributed via check or electronic payment (like PayPal or Venmo) several weeks or months after the settlement becomes final.
How to Protect Your Data in the Future
While settlements provide compensation after the fact, proactive data protection is essential in today’s digital world. Whether or not you were affected by the EyeMed breach, taking these steps can help secure your personal information:
- Enable Two-Factor Authentication (2FA): Use 2FA on all sensitive accounts, especially email and financial portals. This adds a layer of security even if your password is stolen.
- Monitor Your Credit: Regularly check your credit reports for unauthorized accounts or inquiries. You are entitled to one free credit report from each of the three major bureaus every year.
- Be Wary of Phishing: After a data breach, scammers often send fake emails pretending to be the company involved. Always go directly to official websites rather than clicking links in emails.
- Consider a Credit Freeze: A credit freeze is the most effective way to prevent identity thieves from opening new accounts in your name. It is free and can be toggled on or off as needed.
Conclusion
Navigating the aftermath of a data breach can be a long process, but filing a claim for the EyeMed settlement is a critical step in protecting your rights and recovering losses. By following the official procedures and submitting your claim on time, you ensure that you receive the benefits you are entitled to. Remember to keep copies of all your documentation and stay patient as the legal process moves toward final distribution. For more information on protecting your digital life and managing everyday financial tasks, explore our other helpful articles on consumer safety and online security.