AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDFinancial accountMediumResolved

ONEMAIN FINANCIAL GROUP, LLC

bd_3c36ebe18cf067f9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 23, 2022

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for ONEMAIN FINANCIAL GROUP, LLC →5 incidents on file

OneMain Financial Group, LLC notified customers that a vendor accidentally shared credit card transaction reports containing names, credit card numbers, and Social Security numbers with other financial institutions in August 2022. The vendor identified the issue as a software coding error and resolved it on the day of discovery. OneMain confirmed the vendor requested deletion of the misdirected data from unintended recipients.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 1, 2022

Begins

Sep 23, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: ONEMAIN FINANCIAL GROUP, LLC
norm: onemain financial

Name: ONEMAIN FINANCIAL GROUP, LLC
norm: onemain financial
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Aug 1, 2022 – Aug 31, 2022
Materiality determined: —
Notification sent: Sep 23, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown
Third party: via Vendor (unnamed)

During the incident: Worked with the vendor to understand the nature and scope of the incident
Confirmed that the vendor has requested that your information be deleted by the unintended financial institution recipients
Changes made: Vendor resolved the root cause of the misdirected reports on the same day that the incident was identified
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-557549
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 23, 2022
Raw hash: 00b5e8af77f558cb691e9c72975d519ae537f28c7d77ba4fb00187ab7c24c75b

Reporting entityONEMAIN FINANCIAL GROUP, LLC

Victim entityONEMAIN FINANCIAL GROUP, LLC

IncidentUnknown

Stated responseWorked with the vendor to understand the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov