Warby Parker slapped with $1.5M penalty over data breach

The U.S. Department of Health and Human Services has imposed a $1.5 million penalty on American eyewear manufacturer and retailer Warby Parker due to its failure to properly secure its systems from a credential stuffing attack in 2018 that compromised almost 200,000 individuals' protected health information, reports The Record, a news site by cybersecurity firm Recorded Future.