I've been pwned again! For the second time this year, that I know of, all of my personal info was sold on the dark web. I'm still getting lots of phishing emails from the last time, a couple months ago. For example, I've won a couple dozen of sets of Le Creuset Cookware, if I just click n the link and get my computer hijacked, or pay for shipping so they have my banking info, or whatever.
This time, Luxottica Group S.p.A., an Italian eyewear conglomerate, suffered a data breach in March 2021 via one of their partners that exposed the personal information of more than 70M people. The data was subsequently sold via a popular hacking forum in late 2022 and included email and physical addresses, names, genders, dates of birth and phone numbers. Luxottica is the world’s largest eyewear company, glasses, and prescription frames maker, and the owner of popular brands like Ray-Ban, Oakley, Chanel, Prada, Versace, Dolce and Gabbana, Burberry, Giorgio Armani, Michael Kors, Essilor, Persol, LensCrafters, OPSM, Sunglass Hut, Apex by Sunglasshut, Eyemed, Pearle Vision, Sears Optical, Glasses.com, Onesight, and Target Optical. The company operates Eyemed, a vision insurance company in the US. If you have an account on any of those websites, change your password immediately. They got my info through Oakley SI (Standard Issue).
https://www.bleepingcomputer.com/news/security/luxottica-confirms-2021-data-breach-after-info-of-70m-leaks-online/ https://en.wikipedia.org/wiki/Luxottica When I searched my main email address at haveibeenpwned, it says that it's been in 9 data breaches. But I'm a member there, and if I'm signed into my account it shows sensitive data and includes a data breach at guns.com, bringing the total up to 10 for that email address.