Luxottica of America, Inc. recently disclosed a data breach involving unauthorized access to employee payroll accounts. The incident, discovered in early 2026, allowed a cybercriminal to alter direct deposit information, potentially exposing sensitive financial data. Affected individuals should take steps to protect themselves and may have legal options.
Luxottica of America, Inc.’s Data Breach Investigation
Luxottica of America, Inc., a major eyewear company, reported a cybersecurity incident involving unauthorized access to employee ADP payroll accounts. The company became aware of the issue after detecting unauthorized changes to direct deposit information, which raised concerns about potential fraud.
Upon discovery, Luxottica immediately launched an investigation and notified law enforcement authorities. The investigation revealed that between February 6, 2026, and February 12, 2026, an unauthorized individual gained access to certain employee ADP accounts. During this time, the attacker altered bank account details associated with direct deposit, impacting at least one New Hampshire resident.
This type of breach is commonly associated with account takeover attacks, where cybercriminals exploit login credentials to redirect payroll funds. Although the number of affected individuals appears limited, the exposure of financial account information creates a serious risk of fraud and unauthorized transactions.
In response, Luxottica took immediate action to reset account passwords, block further unauthorized access, and implement enhanced security controls for ADP system access. The company is also reviewing its internal security protocols to prevent similar incidents in the future.
On April 8, 2026, Luxottica began notifying affected individuals via U.S. First-Class Mail. As part of its response, the company is offering two years of complimentary identity monitoring services through Kroll, which includes credit monitoring, fraud consultation, and identity theft restoration services.
Additionally, Luxottica has established a dedicated toll-free call center to assist individuals with questions and concerns about the incident.
When Did This Breach Occur?
The Luxottica data breach occurred between February 6, 2026, and February 12, 2026.
The incident was discovered shortly thereafter, and affected individuals were notified beginning on April 8, 2026.
What Information Was Breached?
The compromised information included:
- Full names
- Bank account numbers
- Routing numbers
This type of information is highly sensitive and can be used for financial fraud, including unauthorized transfers or payroll diversion schemes.
What You Can Do
If you were affected by the Luxottica of America, Inc. data breach, consider taking the following steps:
- Enroll in identity monitoring services: Take advantage of the two years of complimentary services through Kroll, which include credit monitoring and identity theft restoration.
- Monitor your bank accounts closely: Review account activity for any unauthorized deposits, withdrawals, or changes.
- Report suspicious transactions immediately: Contact your bank right away if you notice unauthorized activity.
- Change your passwords: Update your login credentials for payroll systems and any accounts that may share similar passwords.
- Be cautious of phishing attempts: Cybercriminals may attempt to use your information to target you with scams.
- Place a fraud alert if needed: Consider adding a fraud alert to your credit file for additional protection.
Taking these proactive steps can help minimize your risk of financial harm.
File a Data Breach Lawsuit Against Luxottica of America, Inc.
If your personal and financial information was exposed in the Luxottica data breach, you may be eligible to pursue compensation through a class action lawsuit. Data breaches involving payroll systems can lead to serious financial consequences, even if fraudulent activity has not yet occurred.
A class action claim can help you recover damages for financial losses, time spent addressing the breach, and emotional distress. It also helps hold companies accountable for failing to adequately protect sensitive information.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
