Asheville Eye Associates Data Breach Settlement Offers Vouchers, Reimbursement, Identity Theft Protection [UPDATE]

New to ClassAction.org? Read our Newswire Disclaimer

Asheville Eye Associates (AEA) will offer vouchers, reimbursements and identity theft protection services as part of a class action settlement that resolves a lawsuit over a November 2024 data breach that compromised the personal information of approximately 327,756 people.

Get class action lawsuit and settlement news sent to your inbox – sign up for ClassAction.org’s free weekly newsletter.

The Asheville Eye Associates class action settlement, which, according to Law360, received preliminary approval from the court on November 5, 2025, covers anyone whose personal health information or personally identifiable information was compromised in the Asheville Eye Associates data breach.

Per court documents, Asheville Eye Associates settlement class members who submit a timely, valid claim form, which will be made available on the official settlement website once it is launched, can receive up to $1,250 in reimbursement for out-of-pocket expenses directly caused by the data breach.

Additionally, class members are automatically eligible to receive identity theft protection services and a $10 voucher for an eyeglass purchase at any Asheville Eye location, except the one at 21 Medical Park Drive, Asheville, North Carolina, court documents add.

The identity theft protection services offered through the settlement will include one year of one-bureau Essential Monitoring. Class members will be able to use the identity theft protection alongside any credit monitoring services already provided by Asheville Eye Associates.

Data breach-related out-of-pocket expenses will be eligible for reimbursement only if they are directly related to the incident and have not already been reimbursed by another source. Class members seeking reimbursement must submit reasonable documentation of each expense. Reimbursable expenses may include, but are not limited to:

• Bank fees, including overdraft, card reissuance, late, and over-limit fees;
• Charges related to the unavailability of funds;
• Charges from banks or credit card companies;
• Costs of credit reports, credit monitoring and/or other identity theft insurance products purchased in response to the data breach; and
• Interest on payday loans due to card cancellation or due to an over-limit situation incurred solely as a result of the data breach.

Once the court-approved AEA settlement website is live, class members will be able to access and submit a claim form for out-of-pocket expense reimbursement.

ClassAction.org will update this page when the official Asheville Eye Associates settlement website is launched.

The enrollment code for the identity theft protection will be provided in the AEA settlement notice, which will be sent to class members no more than 30 days after the date the settlement received preliminary approval from the court. Enrollment codes will remain valid for 90 days after the notices are sent out.

A hearing is tentatively scheduled for February 23 to determine whether the deal will receive final approval from the court. Settlement benefits will begin to be distributed to class members only after final approval has been granted and any appeals have been resolved.

The Asheville Eye Associates class action lawsuit claimed that the healthcare provider failed to prevent a data breach in November 2024 during which unauthorized third parties accessed the sensitive personal and health information— including names, addresses, Social Security numbers, medical treatment information and health insurance information— of roughly 327,756 patients.

Head to ClassAction.org’s settlements page for a complete list of data breach settlements.