[UCRDBR] Kaiser Permanente – Ocuco Vendor Platform Data Breach

[Departmental Benefits Representatives]

[A blue text on a black background  Description automatically generated]



July 3, 2025


To:
Department Benefits Representatives (DBRs)
From:
Central HR Benefits Office on behalf of UC Office of the President
Re:
Kaiser Permanente – Ocuco Vendor Platform Data Breach

DBRs, please share this information via your internal listserv.  Do not reply to this email.  Please
send a separate email with questions to benefits at ucr.edu<mailto:benefits at ucr.edu>.

UCOP was notified that Kaiser Permanente reported a data breach involving its vendor, Ocuco, which provides software solutions through point of sales to support Kaiser’s Vision Essentials services and electronically shares data to other vendors to fill eyeglasses and contact lens orders.

The breach occurred within Ocuco’s platform between March 30, 2025, and April 1, 2025, and involved unauthorized access to certain files containing personal information such as name, address, date of birth, medical record number, health plan information, health insurance number, coverage and claim information, physician name, prescription or medication, treatment or diagnosis, date of treatment, payment for health services, driver’s license number, etc.  A total of 493 UC Kaiser Permanente members were identified in these files, although specific UC locations were not indicated.  Importantly, Kaiser Permanente’s internal systems were not affected, as the breach was confined to the vendor's platform.

Ocuco will begin notifying the affected members on a rolling basis starting on or about July 7, 2025.  The notification will outline:


  *   What happened
  *   What information was involved
  *   What is Ocuco doing
  *   What members can do
  *   A 24-month free subscription to credit monitoring and fraud prevention services
  *   Experian enrollment information
  *   Information about identity theft protection guide

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ucr.edu/pipermail/ucrdbr/attachments/20250703/7f687118/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 16028 bytes
Desc: image001.png
URL: <https://lists.ucr.edu/pipermail/ucrdbr/attachments/20250703/7f687118/attachment.png>