OneDigital Investment Advisors LLC disclosed a data breach tied to third-party platforms Salesforce and Drift, exposing sensitive client data. The incident, discovered in December 2025, affected over 28,000 individuals. If your information was involved, you may have legal options to pursue compensation and protect your identity.
OneDigital Investment Advisors LLC’s Data Breach Investigation
OneDigital Investment Advisors LLC, a financial services firm, reported a data breach stemming not from its internal systems, but from third-party vendors used to manage client data. The breach highlights growing cybersecurity risks associated with external service providers, particularly those handling sensitive customer information.
According to the company, the breach occurred between August 12 and August 18, 2025, when unauthorized access was gained to customer data stored within Salesforce systems through a compromised Drift application. Drift, an online chat platform integrated into OneDigital’s customer relationship management (CRM) environment, had previously been managed by Salesloft. This interconnected system created a pathway for attackers to access stored personal data.
OneDigital became aware of the issue on December 22, 2025, after being alerted to suspicious activity. Upon discovery, the company acted quickly, launching an investigation with the assistance of third-party cybersecurity experts. Their forensic analysis confirmed that unauthorized actors accessed and potentially extracted sensitive personal information during the breach window.
While OneDigital stated there was no evidence its own internal systems were directly compromised, the exposure through third-party vendors raises serious concerns about vendor risk management and data protection practices. Companies are still responsible for safeguarding consumer data—even when that data is handled by outside providers.
Following the investigation, OneDigital conducted a detailed review of the impacted data to determine exactly whose information was exposed. The breach ultimately affected 28,414 individuals, including 73 Maine residents.
In response, the company implemented enhanced security protocols and additional employee training to mitigate future risks. It also began notifying affected individuals and offering support services to help protect against identity theft.
This incident underscores a critical issue: even when companies outsource services, consumers still bear the consequences when security fails. If you were notified of this breach, understanding your rights is an important next step.
When Did This Breach Occur?
The OneDigital Investment Advisors LLC data breach occurred between August 12, 2025, and August 18, 2025.
The breach was discovered on December 22, 2025, several months after the unauthorized access took place.
What Information Was Breached?
The data breach involved exposure of the following personal information:
- Full names
- Social Security numbers
This type of information is highly sensitive and can be used for identity theft, fraudulent financial activity, and other forms of exploitation.
What You Can Do
If you were impacted by the OneDigital data breach, taking immediate action can help reduce your risk:
- Monitor your financial accounts: Regularly check bank statements, credit cards, and financial accounts for unauthorized activity.
- Review your credit reports: Look for unfamiliar accounts or inquiries that could indicate fraud.
- Place a fraud alert or credit freeze: This can help prevent new accounts from being opened in your name.
- Enroll in credit monitoring: OneDigital is offering 12 months of free credit monitoring and identity restoration services through Experian—be sure to activate these services.
- Stay vigilant: Watch for phishing emails or suspicious communications using your personal information.
You don’t have to navigate this situation alone. Many individuals are unaware they may be entitled to compensation after a data breach. Exploring your legal options can help you take back control and hold companies accountable.
File a Data Breach Lawsuit Against OneDigital Investment Advisors LLC
If you received a notification from OneDigital Investment Advisors LLC, you may be eligible to join a class action lawsuit. Data breaches involving Social Security numbers can carry serious long-term risks, and affected individuals may be entitled to financial compensation for damages, time spent addressing the breach, and increased risk of identity theft.
Filing a claim can also help push companies to strengthen their data security practices and prevent future incidents. When many individuals come together, it creates a stronger case for accountability and meaningful change.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
