OneDigital Investment Advisors LLC

OneDigital Investment Advisors LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2026-04-20. The breach occurred during 8/12/2025 - 8/18/2025. The breach was discovered on 8/22/2025. 535 individuals were affected. Notice was sent on 4/8/2026.

OneDigital Investment Advisors LLC based in Atlanta, Georgia, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-12-22 and reported on 2026-04-10. 916 Texas residents were affected. 28,414 individuals affected in total. Types of information involved: Social Security Number Information;Financial Information (e.g. account number, credit or debit card number). Consumers were notified via U.S. Mail.

OneDigital Investment Advisors LLC disclosed a third-party data breach involving its CRM provider Salesforce and Drift (managed by Salesloft). Unauthorized access occurred between August 12-18, 2025, exposing customer names, DOBs, SSNs, usernames, passwords, and financial account data. Approximately 565 Washington residents were notified on April 8, 2026. OneDigital engaged forensic investigators and offered 12 months of credit monitoring.

OneDigital Investment Advisors LLC reported a third-party data breach involving Salesforce and Drift (Salesloft). Unauthorized access occurred Aug 12-18, 2025, exposing names and SSNs of 28,414 individuals. Discovered Aug 22, 2025. Notices sent April 8, 2026. Credit monitoring offered.

OneDigital Investment Advisors LLC notified customers of a data security event involving a third-party application. Between August 12-18, 2025, an unauthorized actor potentially accessed and copied customer data stored in Salesforce due to a compromise of the Drift application (managed by Salesloft). OneDigital was notified by Salesforce on August 22, 2025. The incident did not involve a compromise of OneDigital's internal network. Affected data includes names and other personal information. OneDigital engaged forensic specialists, confirmed system security, and is offering credit monitoring.

OneDigital Investment Advisors LLC notified the New Hampshire Attorney General of a data event involving its third-party vendors, Salesforce and Salesloft (Drift). Between August 12-18, 2025, an unauthorized actor accessed and copied customer data (names and SSNs) from the Drift application. Approximately 163 New Hampshire residents were affected. OneDigital engaged forensic specialists, notified regulators, and provided 12 months of credit monitoring via Experian. The incident did not compromise OneDigital's internal network.

OneDigital Investment Advisors LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2025-08-12 and was reported on 2026-04-08. 96 Indiana residents were affected. 28,414 individuals affected in total.

OneDigital Investment Advisors LLC notified Montana and other state residents of a third-party data security event involving its CRM provider, Salesforce, and the Drift chat application. Between August 12-18, 2025, unauthorized actors accessed and copied customer data stored in Salesforce. OneDigital launched a forensic investigation and reviewed impacted data. Notices were sent on April 8, 2026, offering credit monitoring services. No evidence of misuse was found at the time of notification.

OneDigital Investment Advisors LLC notified Massachusetts residents of an incident involving a third-party application utilized by the firm. The incident did not involve a compromise of OneDigital's internal network or systems. The firm confirmed the security of its own systems and is reviewing data storage policies. No evidence of misuse was found. Affected individuals are offered 24 months of credit monitoring.

OneDigital Investment Advisors LLC notified Vermont AG that a third-party CRM provider (Salesforce/Drift) was compromised between Aug 12-18, 2025. Data accessed included names, SSNs, and ITINs. 35 Vermont residents notified on Apr 8, 2026. Credit monitoring offered.

OneDigital Investment Advisors LLC notified Nebraska residents that data from its Salesforce platform, accessed via a compromised third-party chat tool (Drift/Salesloft), was potentially copied between August 12-18, 2025. Approximately 299 Nebraska residents had their names and Social Security numbers exposed. OneDigital launched a forensic investigation, provided 12 months of credit monitoring via Experian, and notified state regulators.

OneDigital Health and Benefits reported the theft of an employee's unencrypted, password-protected electronic device on January 9, 2020. The incident potentially exposed personal data, including names, addresses, phone numbers, email addresses, partial or full Social Security numbers, dates of birth, member IDs, benefits enrollment information, health factors, and compensation for approximately 2 New Hampshire residents. OneDigital notified affected individuals by March 27, 2020, and offered one year of identity theft protection. The company installed encryption software on all employee devices as a remediation measure.

OneDigital Health and Benefits reported to HHS on 2020-03-06 a Theft affecting 22,894 individuals. Breached information located on Laptop. The incident involved an employee's stolen laptop containing ePHI including names, SSNs, and medical data. The BA sanctioned the employee and implemented technical safeguards.