[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f35lydojlxpnwi":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":13,"contentUpdatedAt":14,"source":15,"sourceUrl":16,"sourceUrls":17,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":20,"affectedCountUnit":21,"hasEnglishDescription":4,"severity":22,"dataClasses":23,"description":28,"seoTitle":16,"seoTitleEn":29,"seoDescription":16,"seoDescriptionEn":30,"logoUrl":31,"isVerified":4,"isSensitive":32,"isSpamList":32,"isMalware":32,"company":33},"68e3266eda11adda488251dc","frame-and-optic","Frame & Optic Data Breach","frame-optic","frameandoptic.com","2025-01-16T00:00:00.000Z","2025-01-22T08:46:16.000Z","2025-01-22T08:46:58.000Z","2026-07-18T23:50:50.656Z","Third party breach","",[],15678,"known",null,"unknown","Medium",[24,25,26,27],"Email addresses","Geographic locations","Names","Phone numbers","\u003Cp>Frame & Optic is a seller of glasses and optical products. The breach in January 2025 affected approximately 16,000 unique email addresses, along with names, phone numbers, and location information such as country, state, and postal code.\u003C\u002Fp>\u003Cp>This record is not a verified incident containing health data or prescription information. Due to the optical retail context, users may be targeted with fake order, product support, or appointment messages; however, it should not be portrayed as if medical prescription, payment card, or password fields have been leaked.\u003C\u002Fp>\u003Ch2>Leaking Data Types and Risks\u003C\u002Fh2>\u003Cp>The data classes tracked in the Frame & Optic record should be treated as email addresses, geographical locations, full name information, and phone numbers. Email addresses can be used for targeted phishing, password reset schemes, and account matching across different services. Geographical location information can indicate the user's region, making local campaign or service pretenses more convincing. Full name information makes fake support, fake donations, fake deliveries, or customer service messages more believable. Phone numbers allow for personalized fraud scenarios to be set up via SMS, calls, and messaging applications.\u003C\u002Fp>\u003Cp>When name, phone, email, and location information are together, fake optical product, warranty, delivery, or discount messages become more convincing. Even if the location information is at the country, state, and postal code level, it can create a local store or delivery context.\u003C\u002Fp>\u003Ch2>Verified Scope and Boundaries\u003C\u002Fh2>\u003Cp>This record is associated with the domain frameandoptic.com and the January 2025 event. The scope is limited to email addresses, geographic location, full names, and phone numbers. Prescription, health data, payment, or password are not verified for this record.\u003C\u002Fp>\u003Cp>Fields not present in this record should not be described as if they were leaked. Full payment card, bank information, official ID, private message, health data, student file, password, or financial data should only be included in the risk assessment if they are explicitly present in the record. The text is based on verifiable data classes and the known boundaries of the incident.\u003C\u002Fp>\u003Ch2>User Groups at Risk\u003C\u002Fh2>\u003Cp>Frame & Optic customers, people who have ordered by phone or received product support, users open to local store or delivery messages, and those who use the same email address on other retail accounts are at risk.\u003C\u002Fp>\u003Cp>Users who use the same email address across different services, repeat their old passwords, share their phone and address information on many platforms, or clearly use their real identity in community\u002Fevent accounts are at higher risk. The privacy impact in records with political, student, or official identity context can be heavier than in normal commercial records.\u003C\u002Fp>\u003Ch2>Urgent Measures to Be Taken\u003C\u002Fh2>\u003Cp>Users should verify delivery, warranty, product return, or payment messages received on behalf of Frame & Optic through the official channel. Since there is no password in this record, these are fraudulent messages coming via mobile phone and email.\u003C\u002Fp>\u003Cp>Users in the positive match area should update their passwords on accounts where they use the same or similar passwords, enable two-step verification where possible, and check recent sessions. Records that do not contain passwords but include contact, donation, address, event, or student data should be monitored for unexpected calls, offers, support, and verification messages.\u003C\u002Fp>\u003Ch2>Long-Term Security Strategies\u003C\u002Fh2>\u003Cp>In the long term, the habit of using a password manager, unique passwords, two-factor authentication, and removing unnecessary personal information from accounts reduces risk. Reusing the same email address across different platforms makes it easier to combine data from different breaches; using a separate email or alias for critical accounts can be considered.\u003C\u002Fp>\u003Cp>Unnecessary phone and location information should be regularly cleaned in retail and optical product accounts. Users should prefer the official site instead of a link in local store or delivery messages.\u003C\u002Fp>\u003Ch2>Record Control and User Action\u003C\u002Fh2>\u003Cp>LeakData check indicates whether the queried email address is found in this record. A positive result does not necessarily mean that all data fields definitely belong to that user; however, it is a sufficient warning for precautionary measures. A negative result only indicates that there is no match in this dataset, and does not eliminate the possibility of appearing in other breaches.\u003C\u002Fp>\u003Cp>A positive result indicates that the email address is found in Frame & Optic records. This result does not imply a health or payment data leak; however, it requires caution due to phone and location context.\u003C\u002Fp>","Frame & Optic Data Breach (15.7 Thousand Reported Records)","Frame & Optic Data Breach. 15.7 Thousand reported records were reported. Reported data: Email addresses, Geographic locations, Names. Review the scope, risks…","\u002Fuploads\u002Flogo\u002Fframeandoptic_com.webp",false,{"name":34,"sector":35,"country":36,"website":10,"websiteArchiveUrl":16,"websiteStatus":16,"websiteCheckedAt":20},"Frame & Optic","Eyewear Retail","United States"]