The eyewear company Luxottica, which is parent company to brands including Ray-Ban and Oakley, has suffered a ransomware attack. On Friday, users on Reddit began reporting that sites for many Luxottica-owned brands were down. The attack was severe enough that some employees in Italy were sent home. In a post to LinkedIn, an information security manager for Luxottica confirmed the ransomware attack and claimed that there “is currently no access or theft of information from users and consumers.” While not confirmed as the method of entry for the attackers, cybersecurity company Bad Packets found that Luxottica had a publicly exposed Citrix device that was vulnerable to CVE-2019-19781 which could have provided access to the internal network if successfully exploited.