OneDigital Investment Advisors LLC, a financial services company, experienced a data breach between August 12 and August 18, 2025. The company discovered this breach on December 22, 2025, and began notifying consumers on April 8, 2026. Regulatory filings with various state Attorneys General confirmed the incident.
The confirmed data types exposed in this breach include names, Social Security numbers, and other personal identifiers. The incident affected 28,414 individuals across the United States. Specific numbers remain unclear for several states, though regulatory filings confirm that residents in Maine, Massachusetts, Texas, New Hampshire, Indiana, California, Oregon, and Vermont were affected. This was a vendor breach involving unauthorized access to OneDigital customer data stored within Salesforce and Drift platforms.
More details about this incident may become available as investigations proceed. Official notices to affected individuals started in April 2026.