(Salem, OR) -- The State of Oregon led a lawsuit against EyeMed Vision Care over a data breach and the company has settled for two-and-a-half million dollars. Florida and New Jersey joined the Oregon Attorney General's office filing the lawsuit. The data breach affected over two-million customers, including 11-thousand Oregonians. Hackers got access to Social Security numbers, birth dates, medical diagnosis and other personal information. EyeMed has agreed to add privacy and security measures. Oregon will receive 750-thousand dollars which will go toward Oregon Department of Justice investigations.