Asheville Eye Associates Says 147,000 Impacted by Data Breach

North Carolina eye care center Asheville Eye Associates (AEA) is notifying roughly 147,000 individuals that their personal information was stolen in a November 2024 data breach.

The incident, the company says, was detected on November 18, after a threat actor gained access to its network and exfiltrated certain files from its systems.

“We quickly engaged third-party specialists to assist us with securing the network environment and investigating the incident,” the company informed the impacted individuals.

The investigation into the stolen data, it says, was concluded on April 14, 2025, and determined that personal information such as names, addresses, Social Security numbers, treatment details, and health insurance information was stolen in the attack.

“As of this writing, we have not received any reports of identity theft related to this incident,” AEA writes in the notification letter to the impacted individuals, a copy of which was submitted to the Maine Attorney ...