Total Vision Settles $475,000 Class Action Over 2020 Data Breach
Total Vision LLC has agreed to a $475,000 settlement to resolve a class action lawsuit stemming from a data breach on October 30, 2020, which exposed the personal and medical information of 88,722 current and former patients and individuals. The breach prompted allegations that the company failed to adequately protect sensitive data, violating California’s Confidentiality of Medical Information Act and other state laws.
Eligibility & Claims
California residents who received a direct mail notice about the breach may file a claim for compensation. Class members can seek:
- A pro rata cash payment from the remaining settlement fund after deductions for administrative costs, legal fees, and service awards.
- Reimbursement of up to $1,000 for documented out-of-pocket expenses linked to the breach, including identity theft losses, card replacement fees, and credit monitoring services purchased after February 28, 2022.
Claims must be submitted online or by mail to the settlement administrator (ILYM Group Inc.) by September 14, 2026, using the ILYM ID and claim ID from the notice. Approved payments will be distributed via PayPal, Venmo, Zelle, or paper check approximately 90 days after the court’s final approval, scheduled for December 18, 2026.
Settlement Fund Breakdown
The $475,000 fund allocates:
- Up to $100,250 for settlement administration costs.
- Up to $158,333.33 in attorneys’ fees.
- Approximately $22,000 for attorneys’ expenses.
- $10,000 total in service awards for class representatives.
- The remaining balance for approved claimants.
Company Response & Security Measures
While Total Vision denies wrongdoing, the settlement requires the company to implement enhanced data security measures for at least two years, valued at over $224,000 annually. The agreement aims to resolve litigation without further legal costs or uncertainty.
Source: https://www.claimdepot.com/settlements/total-vision-settlement
Total Vision cybersecurity rating report: https://www.rankiteo.com/company/totalvisioncare
"id": "TOT1782930811",
"linkid": "totalvisioncare",
"type": "Breach",
"date": "10/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '88,722 current and former '
'patients and individuals',
'industry': 'Healthcare',
'location': 'California, USA',
'name': 'Total Vision LLC',
'type': 'Company'}],
'customer_advisories': 'Direct mail notice to affected individuals with claim '
'instructions',
'data_breach': {'number_of_records_exposed': '88,722',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal information',
'Medical information']},
'date_detected': '2020-10-30',
'description': 'Total Vision LLC agreed to a $475,000 settlement to resolve a '
'class action lawsuit stemming from a data breach on October '
'30, 2020, which exposed the personal and medical information '
'of 88,722 current and former patients and individuals. The '
'breach prompted allegations that the company failed to '
'adequately protect sensitive data, violating California’s '
'Confidentiality of Medical Information Act and other state '
'laws.',
'impact': {'data_compromised': 'Personal and medical information',
'financial_loss': '$475,000 (settlement amount)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Violation of California’s Confidentiality of '
'Medical Information Act and other state '
'laws'},
'investigation_status': 'Settled',
'post_incident_analysis': {'corrective_actions': 'Enhanced data security '
'measures for at least two '
'years',
'root_causes': 'Failure to adequately protect '
'sensitive data'},
'references': [{'source': 'Class Action Settlement Notice'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit',
'regulations_violated': ['California’s '
'Confidentiality of '
'Medical Information Act',
'Other state laws']},
'response': {'communication_strategy': 'Direct mail notice to affected '
'individuals',
'remediation_measures': 'Enhanced data security measures for at '
'least two years, valued at over '
'$224,000 annually',
'third_party_assistance': 'ILYM Group Inc. (settlement '
'administrator)'},
'title': 'Total Vision Data Breach Class Action Settlement',
'type': 'Data Breach'}