OneMain Financial Group, LLC filed a data breach notification with the California Attorney General in September 2026, disclosing that customers’ personal and financial information may have been exposed. The exact number of people affected and the discovery date have not been publicly disclosed. Affected individuals should monitor their credit reports, consider a credit freeze, and watch closely for phishing attempts referencing their account.
| Company | OneMain Financial Group, LLC |
|---|---|
| Industry | Finance |
| Data Types Exposed | Full Names, Contact Information, Financial Account Details, Loan or Credit Information, Social Security Numbers |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | California Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the OneMain Financial Group Data Breach?
OneMain Financial Group, LLC recently filed a formal notification with the California Attorney General disclosing a data breach involving customer information. The filing confirms that unauthorized parties may have gained access to sensitive personal data tied to the company’s customers. As a result, affected individuals across the country are now being notified of the incident.
The exact discovery date of the breach has not been publicly disclosed. However, the company’s notification to regulators came in September 2026, which is when the broader public first learned of the incident. Because many details remain unclear, it is not yet known how long unauthorized access may have continued before it was detected.
OneMain Financial Group has not released extensive public detail about the specific method used to carry out the breach. In many similar cases, companies conduct an internal investigation, sometimes with the help of outside cybersecurity experts, to determine how attackers gained entry and what data was touched. At this time, the filing itself is the primary confirmed source of information about the incident.
Who was affected?
The breach appears to primarily affect individuals who have a customer relationship with OneMain Financial Group. This could include current borrowers, past customers, or others whose information was stored in the company’s systems. Because OneMain operates as a consumer finance company, the affected population likely includes everyday individuals who took out loans or used related financial products.
The total number of people affected by this breach has not been publicly disclosed. In addition, the filing does not specify whether the incident is limited to California residents or extends to customers nationwide. Given that breach notifications like this one are often filed in multiple states simultaneously, it is possible additional details will emerge as more state-level filings become public.
It also remains unclear whether minors or dependents connected to any customer accounts could be involved. Consumers who have ever held an account, loan, or financial product with OneMain Financial Group should consider themselves potentially affected until they receive direct notice or confirm otherwise.
What Information Was Potentially Exposed?
While the full scope of exposed data has not been detailed publicly, breach notifications of this type typically involve sensitive personal and financial information. Because OneMain Financial Group provides consumer loans and financial services, the data it holds is often highly sensitive by nature.
- Full names
- Contact information such as addresses and phone numbers
- Financial account details
- Loan or credit-related information
- Potentially Social Security numbers
- Other identifying personal information tied to customer accounts
If Social Security numbers or financial account details were indeed included, affected individuals face a heightened risk of identity theft. Criminals can use this type of data to open new credit accounts, file fraudulent tax returns, or apply for loans in someone else’s name. This kind of fraud can take months to detect and even longer to fully resolve.
In addition, exposed contact and account information can fuel targeted phishing attempts. Scammers often use real account details to make fraudulent emails or calls appear legitimate. As a result, affected individuals should treat any unexpected communication referencing their OneMain account with caution, even if it appears to come from a trusted source.
What is the company doing?
OneMain Financial Group filed formal notification of the breach with the California Attorney General. This filing is a required legal step when a company determines that California residents’ personal information may have been compromised. The company also filed formal notification with the California Attorney General, as confirmed by public regulatory records.
Beyond the regulatory filing itself, the source material does not describe additional specific remediation steps, such as system upgrades or third-party forensic reviews. Because the notification is the primary confirmed action at this time, affected individuals should watch for direct mail or email notices from OneMain Financial Group. These notices typically include more specific details about what happened and what protections, if any, are being offered.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request and review their credit reports from all three major credit bureaus. This helps identify any unfamiliar accounts, inquiries, or changes that could signal fraud. You are entitled to a free credit report from each bureau annually, and many offer additional free checks during a breach event.
Because financial information may have been involved in this breach, ongoing monitoring is especially important. Consider checking your reports every few months rather than just once. This way, you can catch suspicious activity early, before it grows into a larger financial problem.
Consider a Fraud Alert or Credit Freeze
If Social Security numbers or financial account details were exposed, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires lenders to take extra steps to verify your identity before opening new credit. A credit freeze goes further, blocking most access to your credit file entirely.
Both options are free to set up and can be requested directly through each of the three credit bureaus. Although a freeze requires a few extra steps when you need to apply for new credit yourself, it offers strong protection against unauthorized account openings. Given the sensitivity of financial data tied to a company like OneMain, this precaution is worth considering.
Watch for Phishing and Scam Attempts
Because attackers often use stolen personal data to make scams more convincing, affected individuals should be alert for suspicious emails, texts, or calls. Be especially cautious of messages that reference your OneMain account or ask you to verify personal information. Legitimate companies rarely ask for sensitive details through unsolicited messages.
Instead of clicking links in unexpected messages, go directly to the official OneMain Financial Group website or call a verified customer service number. This simple habit can prevent you from accidentally handing over login credentials or financial details to a scammer. Staying skeptical of urgent or threatening language is another useful defense.
Keep Records and Consider Legal Options
Affected individuals should keep copies of any breach notification letters, as well as records of any suspicious activity discovered afterward. This documentation can be useful if you need to dispute fraudulent charges or file a complaint. It can also support a potential legal claim if damages result from the breach.
Many consumers affected by data breaches choose to consult a data breach attorney for a free case evaluation. An attorney can help determine whether you may be eligible for compensation. Because deadlines for filing claims can be limited, it is wise to explore your options sooner rather than later.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
Official data breach notification from California Attorney General