HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedMulti-Stage ChainDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
OneDigital Investment Advisors LLC
bd_17257010d9a4d51a · schema v1 · pii pii-v1
Full breach record for OneDigital Investment Advisors LLC →Aug 12-18, 2025: unauthorized actor accessed and copied OneDigital data in Salesforce via compromise of Drift app (Salesloft). OneDigital notified Aug 22, 2025. Data involved: name and SSN. 73 of 28,414 total affected are Maine residents. Notices mailed Apr 8, 2026. Experian credit monitoring (12 months) offered.
Maine clockDiscovered Aug 22, 2025 → Filed with AG Apr 8, 2026229d ✗ ME AG >90d33 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_16dcd2a6a721552eWashington State AGfiled 2026-04-08Candidate
- bd_5a1b88518f9bfe89California State AGfiled 2026-04-08Verified
- bd_616a7eca5bff3650New Hampshire State AGfiled 2026-04-08Verified
- bd_89c363698f4bb715Indiana State AGfiled 2026-04-08Verified
Show 3 more filings ↓Show fewer ↑up to 12d gap
- bd_a8e53b1611378d44Vermont State AGfiled 2026-04-08Verified
- bd_ed2c8dae469e2d8bTexas State AGfiled 2026-04-10(2d gap)Verified by operator
- bd_2634d621d74802adOregon State AGfiled 2026-04-20(12d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2bd22b63-2982-46bb-a18a-e10c7cb4f00c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2026
- Raw hash
- 20d31a4d7f5f314aefe8a2a98b89636810c41e544d23027862b1c2dceea034e1
Reporting entity
- Name
- OneDigital Investment Advisors LLCnorm: onedigital investment advisors
- Domain
- onedigital.com
- Industry
- Financial Services
Victim entity
- Name
- OneDigital Investment Advisors LLCnorm: onedigital investment advisors
- Domain
- onedigital.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Aug 22, 2025
- Materiality determined
- —
- Notification sent
- Apr 8, 2026
- Affected individuals
- 73
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid AccountsT1530 Data from Cloud Storage
- Threat actor
- External
- Regulator citations
- Notified Maine Attorney GeneralNotified applicable state regulatorsNotified Equifax, Experian, TransUnion
- Initial access
- supply_chain
Compliance
- Time to disclose
- 33 weeks(229 days from discovery to filing)
- Compliance flags
- ME AG >90d · 229dME resident >180d · 229d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 22, 2025→ Filed with AG: Apr 8, 2026229d 90 days ME AG >90d Maine Discovered: Aug 22, 2025→ Notified: Apr 8, 2026229d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.