Andover Eye Associates disclosed a data breach after unauthorized access to employee email accounts exposed patient information, including Social Security numbers.
Andover Eye Associates Data Breach Investigation
Andover Eye Associates, an optometry practice based in Andover, Massachusetts, has reported a data security breach involving unauthorized access to employee email accounts. The breach occurred on May 28, 2025, and was discovered nearly six months later on November 4, 2025, after a detailed internal investigation.
The incident began when suspicious activity was detected in two employee email accounts. Andover immediately initiated a forensic investigation and began reviewing the impacted mailboxes to identify whether sensitive information was accessed. On completing the review, the company determined that emails containing personally identifiable information (PII) were exposed.
The breach affected 1,638 individuals, including seven Maine residents. While small in scale, the nature of the information involved—specifically names and Social Security numbers—makes the incident highly sensitive. Social Security numbers are often a prime target for identity theft and financial fraud.
In response, Andover has notified all affected individuals and is offering one year of complimentary credit monitoring and identity restoration services through Epiq Global. The company also filed notices with federal law enforcement, the U.S. Department of Health and Human Services, and appropriate state regulators, in compliance with HIPAA and other data protection laws.
Andover has pledged to enhance security practices going forward, including employee training and updated safeguards to prevent similar incidents. While no evidence of fraud has yet been linked to the breach, affected individuals are urged to monitor their financial and medical records closely.
When Did This Breach Occur?
-
Date of Breach: May 28, 2025
-
Date Discovered: November 4, 2025
-
Notification Sent: December 31, 2025
What Information Was Breached?
-
Full names
-
Social Security numbers
This information was contained in compromised email accounts accessed by an unauthorized actor.
What You Can Do
If you received a notification from Andover Eye Associates, it’s important to act quickly:
-
Enroll in Credit Monitoring: Take advantage of the complimentary one-year credit monitoring and identity restoration services provided through Epiq Global.
-
Monitor Financial Accounts: Check your bank statements, credit cards, and insurance claims for suspicious activity.
-
Check Your Credit Report: You’re entitled to one free credit report annually from each of the major bureaus (Equifax, Experian, TransUnion).
-
Place a Fraud Alert or Freeze: Prevent new credit from being issued in your name by contacting the credit bureaus directly.
-
Report Identity Theft: File a report with the FTC and notify law enforcement if you detect fraud.
At Class Action U, we help consumers navigate the legal process after data breaches. You are not alone—your rights matter, and taking the next step could protect you and others from future harm.
File a Data Breach Lawsuit Against Andover Eye Associates
If you were notified that your information was exposed in this incident, you may be eligible to join a lawsuit against Andover Eye Associates. Data breach laws exist to protect consumers like you, and companies that handle sensitive information have a legal responsibility to keep it secure.
Even though only a small number of individuals were affected, those exposed may still be at risk for identity theft, tax fraud, and financial harm. A class action lawsuit can provide compensation for these risks, as well as ensure companies are held accountable for security lapses.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
