On April 23, 2026, America's Best filed an official data breach notice with the Indiana Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Indiana Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official Indiana AG notice for America's Best identifies the following exposed data:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
America's Best operates as a prominent nationwide optical retail and eye care provider, combining comprehensive optometric examinations with the retail sale of eyeglasses, contact lenses, and prescription sunglasses. Because the organization functions at the intersection of retail commerce and specialized healthcare, it routinely collects and maintains a vast repository of sensitive consumer information. Patients and customers entrust America's Best not only with standard retail transaction data, but also with confidential medical evaluations, prescription histories, vision insurance details, and personal identification records necessary for coordinated eye care and health plan billing.
In 2026, America's Best formally reported a significant data security incident to the Indiana Attorney General, alerting consumers and regulatory authorities to an unauthorized intrusion into its digital network infrastructure. While investigations into security incidents of this magnitude often involve sophisticated cyber threats such as compromised administrative credentials, unauthorized access to centralized customer databases, or vulnerabilities within third-party vendor platforms, such events underscore critical weaknesses in digital perimeter defenses. When attackers infiltrate an optical and medical retailer's systems, they frequently gain unfettered access to legacy databases that may lack modern encryption standards or multi-factor authentication protections.
The exposure resulting from the America's Best data breach encompasses highly sensitive categories of information, including full names, dates of birth, Social Security numbers, health insurance identification details, and specific optometric prescriptions or diagnostic records. The compromise of this data exposes victims to severe, long-term risks. Unlike simple credit card numbers that can be easily cancelled and replaced, immutable data points like Social Security numbers and dates of birth can be weaponized by cybercriminals to open fraudulent credit accounts, secure unauthorized loans, or execute tax refund fraud. Furthermore, the combination of personal identifiers and vision health data creates heightened vulnerabilities for medical identity theft, where bad actors could exploit stolen information to bill insurance providers for fraudulent treatments or misappropriate healthcare services.
As a commercial enterprise handling both consumer health data and personally identifiable information, America's Best was legally bound by stringent regulatory standards, including state data protection statutes, the Indiana Disclosure of Security Breach Law, and relevant provisions of the Federal Trade Commission Act. These legal frameworks mandate that companies implementing digital infrastructure must maintain robust, industry-standard administrative, physical, and technical safeguards to protect consumer data from unauthorized disclosure. The occurrence of a widespread data breach strongly indicates a potential failure of these foundational legal obligations, suggesting that the company may have neglected necessary network monitoring, delayed patch management, or failed to adequately vet third-party vendor access.
For residents of Indiana and consumers nationwide who have received a formal data breach notification letter from America's Best, this correspondence serves as legal acknowledgment that their private information was compromised due to corporate negligence. Legally, the receipt of this notice establishes the concrete injury necessary to pursue accountability through a class action lawsuit, without requiring proof of immediate financial loss. Our law firm is actively investigating the America's Best data breach, and we handle all claims on a contingency fee basis, meaning affected individuals pay zero upfront costs and owe no legal fees unless we successfully recover compensation on their behalf.
Notification Delay: Approximately 1 month elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from America's Best
You were a customer, patient, employee, or client of America's Best
Your personal information was stored in America's Best's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the America's Best letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Time limits can forfeit your claim. Have attorneys review your America's Best case at no cost — contingency means zero upfront fees.
Security Incident
2026-03-13
America's Best's systems were compromised, exposing stored personal records.
Reported to Attorney General
April 23, 2026
America's Best filed its official breach notice with the Indiana Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Compensation in a case like America's Best's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Indiana's data breach law (IC 24-4.9) requires companies to notify affected residents and the Attorney General. Indiana residents may pursue damages under the Deceptive Consumer Sales Act for a company's failure to protect personal information.
These organizations also reported breaches to the Indiana Attorney General. If their letters reached you too, each may carry its own claim.
Zaxis Financial Services Americas LLC
Indiana · Sep 2026
Woodlawn Hospital
Indiana · Sep 2026
Wooddesign RV Interiors LLC
Indiana · Sep 2026
Woodard, Emhardt, Henry, Reeves, & Wagner LLC
Indiana · Aug 2026
Wired Communications
Indiana · Jun 2026
33156
Indiana · Mar 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris