DisclosureLens
UnknownFinancial ServicesFinanceFinancial accountGovernment IDHigh

OneDigital Investment Advisors LLC

bd_ed2c8dae469e2d8b · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 22, 2025

Filed

Apr 10, 2026

To disclose

16 weeks

Affected · nationwide

28,414916 in this filing

Linked

11 filings

Confidence

95%
Full breach record for OneDigital Investment Advisors LLC →3 incidents on file

OneDigital Investment Advisors LLC based in Atlanta, Georgia, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-12-22 and reported on 2026-04-10. 916 Texas residents were affected. 28,414 individuals affected in total. Types of information involved: Social Security Number Information;Financial Information (e.g. account number, credit or debit card number). Consumers were notified via U.S. Mail.

Texas clock✗ TX AG >30d16 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 132 days
discovery → filing · ≤ 16 weeks / 109 days

Aug 12, 2025

Begins

Dec 22, 2025

Discovered

Apr 10, 2026

Filed

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 10d gap

Filing propagation · 11 filings · 11 states

View merged incident ↗
Washington State AGApr 8 · first
Maine State AGApr 8 · first
California State AGApr 8 · first
New Hampshire State AGApr 8 · first
Indiana State AGApr 8 · first
Montana State AGApr 8 · first
Massachusetts State AGApr 8 · first
Vermont State AGApr 8 · first
Nebraska State AGApr 8 · first
Texas State AG+2d · this page
Oregon State AG+12d

Pattern: first filing Apr 8 (WA), last Apr 20 (OR) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.