OneDigital Data Breach Lawsuit Investigation
If you recently received a letter about the OneDigital security incident, your personal information may have been exposed during a third-party vendor compromise. Join this free investigation to explore your legal options and secure complimentary identity-protection services.
Snapshot of the OneDigital Breach
Breach window: August 12 – August 18, 2025
Incident discovered: August 22, 2025 (notified by Salesforce)
Consumer letters mailed: April 8, 2026
System involved: Salesforce customer-relationship data, accessed through a compromise of the Drift application (formerly used with Salesloft)
Information exposed: Name and additional personal details listed in the mailed notice
Credit protection offered: Complimentary credit and identity monitoring through Experian
How the Incident Happened
OneDigital Investment Advisors LLC (“OneDigital”) learned from Salesforce that an unauthorized actor had potentially accessed and copied certain Salesforce data by exploiting a security weakness in the Drift online chat tool between August 12 and August 18, 2025. Drift was part of Salesloft, OneDigital’s former customer-relationship platform. OneDigital’s own internal networks were not compromised.
What Information Was Involved?
Following a detailed forensic review, OneDigital determined that each impacted individual’s name—and possibly other categories of personal information itemized in the notification letter—were involved. No evidence suggests that Social Security numbers or financial account credentials were necessarily exposed; however, affected consumers should assume that sensitive data may be at risk until they confirm the specifics in their letter.
Company Response
Immediately after receiving Salesforce’s alert, OneDigital engaged leading cybersecurity specialists to investigate, secured its systems, and began an extensive audit of the affected data. The company is now:
Reviewing and enhancing policies, procedures, and storage practices for sensitive information
Notifying all impacted consumers in accordance with state law
Providing free credit and identity monitoring services through Experian (enrollment required)
Steps You Can Take Now
Enroll in the complimentary Experian credit-monitoring service before the deadline stated in your letter.
Regularly check bank, credit card, and insurance statements for unfamiliar charges.
Obtain and review your free yearly credit reports from the major bureaus.
Consider placing a fraud alert or security freeze on your credit files if you detect suspicious activity.
Company Overview
OneDigital Investment Advisors LLC (OneDigital) is a national financial-services firm based in Atlanta, Georgia. The company focuses on retirement plan consulting, employee benefits, wealth management, and HR services.
Website: onedigital.com
Headquarters: Atlanta, GA, USA
Founded: 2000
Industry: Financial Services
Employees: 3,000+
Parent entity: OneDigital
Privacy policy: onedigital.com/en-US/disclosures/
Social profiles: LinkedIn • Facebook • X/Twitter • Instagram
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from OneDigital — what should I do?
Follow the activation instructions in the letter to enroll in the free Experian monitoring service, keep a close eye on your financial statements, and consider additional safeguards such as a fraud alert.
How do I submit a claim related to the OneDigital data breach?
You can join this lawsuit investigation at no cost by completing the form on this page. An attorney will review your eligibility and provide next steps.
Am I eligible to join a lawsuit against OneDigital?
Anyone who received a mailed breach notice dated April 8, 2026 may qualify. Eligibility is confirmed after an attorney reviews your documentation.
What information did the OneDigital breach expose?
The letter states that names and other personal information were potentially copied from Salesforce. Check your letter for the exact data elements tied to your record.
Did OneDigital offer credit monitoring, and for how long?
Yes. OneDigital is offering complimentary credit and identity monitoring through Experian. The letter contains your unique enrollment code and coverage length.
How many people were affected by the OneDigital breach?
OneDigital has not publicly disclosed the exact number of impacted individuals as of the date of this publication.
How can I get the official breach notice (PDF) for OneDigital?
You can download the Maine Attorney General filing directly using the button near the top of this page.
Attorney Advertising. Prior results do not guarantee a similar outcome.
