Superior Vision Service, a vision benefit provider, experienced a cyberattack. On July 9, 2025, an employee was the victim of an email phishing attack. An investigation determined that a cybercriminal may have downloaded emails containing customer information on July 11, 2025.
A review took place and determined that both both personally identifiable information (PII) and protected health information (PHI) were compromised. Exposed information included full names, physical addresses, phone numbers, email addresses, dates of birth, gender, Social Security numbers, vision coverage election information and employment information related to enrollment.
Superior Vision began notifying impacted individuals by mail on Sept. 26, 2025. The data breach was also disclosed to the New Hampshire Attorney General on the same day. The total number of affected individuals has not been released but is believed to be in the thousands.
The company is continuing to issue state required disclosures, with the Massachusetts Attorney General and California Attorney General notified on Sept. 29, 2025 and the Texas Attorney General's office on Oct. 1, 2025.
Following the breach, Superior Vision Services and Versant Health disabled the email account, acted to secure its systems and notified law enforcement. Superior Vision is also offering impacted individuals one free year of Trans Union Interactive three-bureau credit monitoring services through myTrueIdentity.
If you receive a notice from Superior Vision or your employer about this data breach, you may want to:
More information about Superior Vision is available on the Versant Health website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.