
Superior Vision Service, a vision benefit provider, experienced a cyberattack. On July 9, 2025, an employee was the victim of an email phishing attack. An investigation determined that a cybercriminal may have downloaded emails containing customer information on July 11, 2025. A review took place and determined that both both personally identifiable information (PII) and protected health information (PHI) were compromised.
Exposed information included full names, physical addresses, phone numbers, email addresses, dates of birth, gender, Social Security numbers, vision coverage election information and employment information related to enrollment. So far, the cybersecurity incident has impacted at least 25,341 individuals including 3,161 residents in Texas, 140 in Massachusetts and 10 in New Hampshire.
Superior Vision began notifying impacted individuals by mail on Sept. 26, 2025. On the same day, the company began disclosing the breach to the Attorney Generals' offices in New Hampshire, Massachusetts, California and Texas. Superior Vision also notified the U.S. Department of Health and Human Services of the cybersecurity incident on Sept. 29, 2025.
Following the breach, Superior Vision Services and Versant Health disabled the email account, acted to secure its systems and notified law enforcement. Superior Vision is also offering impacted individuals one free year of Trans Union Interactive three-bureau credit monitoring services through myTrueIdentity.
If you receive a notice from Superior Vision or your employer about this data breach, you may want to:
More information about Superior Vision is available on the Versant Health website.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)