OneMain Financial Data Breach Affects 16k: Social Security Numbers Exposed

OneMain Financial Group LLC, a consumer lending company headquartered in Evansville, Indiana, disclosed a data breach that was first identified in May 2026.

After discovering, the company acted to stop the activity and took steps to enhance its security measures. It also began working with a cybersecurity and forensic firm to investigate what happened.

The investigation found evidence that data containing personal information was accessed or acquired on May 5, 2026. At this time, the company did not disclose the specific type of cyberattack or name the party responsible for the unauthorized activity.

The types of information exposed included names, addresses, Social Security numbers and other account-related information.

The breach has so far affected 15,472 Texas residents and 1,516 South Carolina residents. Additionally, a filing with the Oregon Attorney General disclosed 960 individuals impacted.

The breach was further reported to the California Attorney General and to the Massachusetts Attorney General. OneMain Financial began mailing notification letters to impacted individuals on Sept. 28, 2026.

OneMain Financial's response to the breach

OneMain Financial is offering affected individuals 24 months of complimentary credit monitoring and identity protection services through TransUnion. To enroll, affected consumers can visit the TransUnion enrollment page and enter the unique activation code included in their notification letter. The deadline to enroll is Dec. 31, 2026.

Consumers who believe they may be affected should watch for a notification letter arriving by mail from OneMain Financial c/o Cyberscout, P.O. Box 1286, Dearborn, MI 48120-9998.

The company has set up a dedicated phone line for questions about the breach at 1-833-516-9566. Representatives are available Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding major U.S. holidays. OneMain Financial's general customer service number is 1-888-846-0332.