OneMain Financial Group, LLC, one of the country’s largest consumer installment lenders, has notified the Texas Attorney General that 15,472 Texas customers’ names, addresses, and Social Security numbers were exposed in a data breach — but the company’s filing doesn’t say how the breach happened or when.
OneMain Financial Group, LLC, a subsidiary of OneMain Holdings, Inc. and one of the largest consumer installment lenders in the country, filed a data breach report with the Texas Attorney General on September 25, 2026. According to that filing, 15,472 Texas residents had their names, addresses, and Social Security numbers affected, and notice was sent by U.S. mail. The filing does not disclose when the breach occurred, when OneMain discovered it, or how the intrusion happened — details that are notably absent given the scale of the filing.
Source: Texas Attorney General data security breach report, published 09/25/2026.
¿Qué información fue expuesta?
The Texas filing confirms that affected customers’ names, addresses, and Social Security numbers were involved. Social Security numbers are among the most sensitive categories of personal information a company can expose — they’re difficult or impossible to change and can be used to open new credit accounts, file fraudulent tax returns, or commit other forms of identity theft for years after a breach.
Su información de identificación personal (IIP) incluye datos que permiten identificarle, como su nombre y otros datos personales. Las organizaciones que gestionan datos sanitarios están obligadas por ley a proteger esta información. Cuando la IIP queda expuesta en una filtración de datos, los ciberdelincuentes pueden utilizarla para cometer robo de identidad, fraude financiero u otros abusos.
A Notably Thin Public Filing
What’s unusual about this breach is how little OneMain has disclosed. The Texas filing gives a population count and a data-type list, but nothing about when the breach happened, how OneMain discovered it, or how long the gap was between discovery and notice. For a national lender with customers well beyond Texas, that also raises an obvious question: how many people outside Texas were affected? Texas requires public reporting once a threshold number of state residents is affected; OneMain’s presence in nearly every state means the true number of affected customers could be considerably larger than 15,472.
Not to Be Confused With OneMain’s 2022 Breach
OneMain previously disclosed a separate data breach involving California customers tied to a 2022 incident. This is a new and different matter — the Texas filing reflects a breach reported in September 2026, and nothing in the public record ties it to the earlier 2022 incident.
Lo que puedes hacer ahora
- If you’re a OneMain Financial customer, especially in Texas, watch for a notice letter and enroll in any credit monitoring services offered
- Se ha confirmado la exposición de números de Seguro Social, y se ha activado una alerta de fraude o un bloqueo de crédito con las tres principales agencias de crédito.
- Monitor your credit reports and financial accounts closely for unauthorized activity or new accounts you didn’t open
- Watch for phishing attempts referencing OneMain Financial or your loan account
- Contact us for a free case review if you received a notice letter from OneMain, or if you’re a OneMain customer concerned about this breach
¿Tiene opciones legales?
Consumer lenders that collect Social Security numbers as part of the loan application and underwriting process have a legal duty to secure that information. If you’re a OneMain Financial customer whose information was exposed, you may have legal options.
If you received a data breach notice from OneMain Financial, contact Emery | Reddy today for a free case review.
Preguntas Frecuentes
What information was exposed in the OneMain Financial breach?
OneMain’s Texas regulatory filing confirms names, addresses, and Social Security numbers of 15,472 Texas residents were affected.
How many people are affected nationally?
OneMain has only disclosed the Texas figure of 15,472. Given that OneMain operates branches in most U.S. states, the true national number is likely higher, but no national total has been released.
¿Cuándo se produjo la filtración?
OneMain’s public filing does not disclose when the breach occurred, when it was discovered, or how it happened.
Is this related to OneMain’s 2022 data breach?
No. OneMain previously disclosed a separate breach involving California residents tied to a 2022 incident. This is a new matter reported in September 2026, with no stated connection to the earlier breach.
¿Tengo derecho a reclamar legalmente?
Consumer lenders have a legal duty to protect the Social Security numbers and personal information they collect from customers. If you’re a OneMain Financial customer and received a notice letter, contact the Data Breach Attorneys at Emery | Reddy at 916.995.5968 or www.emeryreddy.com Para una revisión gratuita de su caso. No cobramos honorarios a menos que obtengamos una compensación.
