Online retailer Provision Supply LLC (Provision Supply) (operator of EZContactsUSA.com which sells contacts and eye glasses) settled with the New York attorney general last week for its failure to notify its web customers of a data breach that may have exposed 25,000 credit card numbers. Provision Supply will pay a $100,000 penalty and must improve