OneMain Financial Lawsuit: The May 2026 Data Breach and What Exists to Claim
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
The OneMain Financial lawsuit in the news right now is a data breach case. OneMain says files with names, addresses and Social Security numbers were accessed or taken in May 2026; it began mailing notice letters on September 28, 2026. Within days, at least two class actions were filed in federal court in Maryland. As of October 2026 there is no settlement, no fund and no claim form. Older OneMain settlements you may see online are separate cases, and they are closed.
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology
Reviewed by Leonard Goldberg, Editor · Last updated
What the Data Breach Lawsuits Say
OneMain makes secured and unsecured personal installment loans, many to borrowers with fair or poor credit; the complaints say customers must hand over sensitive personal information to get a loan. According to breach notices summarized in press reports, data containing personal information was accessed or acquired on May 5, 2026, and included names, addresses, Social Security numbers and other account-related information. OneMain says it stopped the activity, hired a forensic firm and strengthened its security.
The lawsuits allege OneMain did not encrypt the files, kept data longer than it needed to, lacked safeguards such as intrusion detection and penetration testing, and waited too long to tell customers. One complaint alleges, on information and belief, that the data was likely published on the dark web. The claims pleaded are negligence, negligence per se, breach of implied contract and unjust enrichment. These are allegations; OneMain has not been found liable for anything.
Case Details
Both known cases are in the U.S. District Court for the District of Maryland: Harris v. OneMain Financial Group LLC, No. 1:26-cv-03823, filed September 28, 2026 — three days after OneMain's public notice to the Texas attorney general — and Fedorchak v. OneMain Financial Group LLC, No. 1:26-cv-03845. Each seeks to represent a nationwide class of people whose information was accessed or acquired in the breach, plus damages, restitution and security improvements, including lifetime credit monitoring in the Fedorchak complaint.
Separately, on March 16, 2026, a bipartisan coalition of 13 state attorneys general led by New York sued OneMain in New York over add-on products such as credit insurance and auto and home memberships. That is a government enforcement case, not a class action; the states seek restitution, penalties and an end to the practices. OneMain told AP the allegations are “simply untrue.” See the New York Attorney General's announcement.
Status: New Breach Suits, No Settlement
The one real deadline today belongs to OneMain's own offer: 24 months of free credit monitoring through TransUnion, using the activation code in your notice letter, with enrollment open until December 31, 2026. That is not a legal settlement and enrolling does not waive anything in the lawsuits.
Don't miss the claim deadline
Claims are due by December 31, 2026. We'll email you 7 days and 1 day before the deadline.
Are You Affected?
Your mail is the test. OneMain began mailing breach notices on September 28, 2026. State filings reported in the press show at least 15,472 Texas residents, 1,516 South Carolina residents and 960 Oregon residents, and the breach was also reported to California's attorney general — more than 17,000 people across several states by those filings, with the full national count not confirmed in the sources we reviewed. Keep the letter: it is your proof of membership if a class is ever certified or a settlement reached.
There is no “onemain financial lawsuit sign up.” You do not join a class action by registering. If a class is certified or a settlement is approved, a court-appointed administrator notifies class members directly. Ads that say “join the class action” are law firms looking for clients — hiring one is optional and is a different decision from being a class member.
What a OneMain Payout Could Look Like
Two earlier OneMain matters did pay, and both are closed. In the Florida text-message case, Matuch v. OneMain Financial Group, LLC, No. CACE-24-007594, OneMain agreed to a $500,000 fund paying valid claimants up to $500 each, pro rata; the claim deadline was April 23, 2025, and payments were reported issued beginning August 15, 2025. In 2023 the CFPB ordered OneMain to pay $20 million — $10 million in refunds to consumers plus a $10 million penalty — over add-on product sales.
OneMain Financial Lawsuit Timeline
- 1
May 31, 2023 — CFPB Orders $20 Million
The CFPB orders OneMain to pay $10 million in refunds and a $10 million penalty over add-on products and unrefunded interest for about 25,000 customers.
- 2
April 23, 2025 — Florida Settlement Claims Close
Last day to claim from the $500,000 Matuch settlement over late-night texts and emails to Florida customers. Payments were reported issued from August 15, 2025.
- 3
March 16, 2026 — 13 States Sue Over Add-Ons
A bipartisan coalition of attorneys general led by New York sues OneMain over add-on products. OneMain denies the allegations.
- 4
May 5, 2026 — Data Accessed
Per OneMain's breach notices as reported, files with names, addresses and Social Security numbers were accessed or acquired.
- 5
September 25–28, 2026 — Disclosure and Lawsuits
OneMain notifies state regulators starting September 25 and mails letters from September 28. Harris v. OneMain is filed in Maryland federal court on September 28; Fedorchak follows.
- 6
October 2026 — No Settlement
As of October 5, 2026, the breach cases are newly filed. No settlement, fund, claim form or deadline exists.
Three Things to Watch For
A fresh breach involving Social Security numbers, a well-known lender and no claim form is the gap imposters fill:
“OneMain breach claim form” sites
No claims portal exists for the 2026 breach. A page asking for your Social Security number or loan details to “secure your payout” is collecting data, not filing a claim.
Fake TransUnion enrollment calls
The real monitoring offer uses an activation code printed in your letter, entered by you on TransUnion's site. Nobody legitimate calls to “activate” it by asking for your code, Social Security number or bank login.
“Refund” offers about old settlements
The Florida Matuch settlement is closed, and the CFPB's 2023 announcement describes refunds paid by OneMain, not a claim process. A caller offering to release a OneMain refund or settlement check for a fee, or asking you to pay a loan balance to “unlock” it, is a scam.
OneMain Financial Lawsuit — Questions People Ask
Is there a OneMain Financial lawsuit claim form?
Not for the 2026 data breach. As of October 5, 2026, the Maryland cases are newly filed, with no settlement and no claim form. The only past OneMain claim form we found, for the Florida Matuch settlement, closed on April 23, 2025.
What is the OneMain Financial lawsuit settlement people mention?
Usually one of two closed matters: the $500,000 Florida settlement over late-night texts and emails, or the 2023 CFPB order requiring $10 million in refunds. Neither is related to the 2026 data breach.
What was the onemain financial lawsuit 2024 settlement?
Searches for a “onemain financial lawsuit 2024 settlement” usually mean Matuch v. OneMain Financial Group, LLC, No. CACE-24-007594, a Florida case under the Florida Consumer Collection Practices Act. It covered Florida residents who got account emails, texts or push notifications between 9:00pm and 8:00am from May 31, 2022 to April 23, 2025. Claims are closed.
How many people were affected by the OneMain data breach?
State filings reported in the press show at least 15,472 Texas, 1,516 South Carolina and 960 Oregon residents, plus a report to California — more than 17,000 in total by those filings. Higher figures circulate online, but we could not confirm a national total.
Do I need to sign up for the OneMain class action?
No. Class members are included automatically if a class is certified; you would only act to opt out or to file a settlement claim. Law-firm “sign up” forms are client intake, not class registration.
Is the OneMain breach letter real?
OneMain began mailing breach notices on September 28, 2026, offering 24 months of TransUnion monitoring with an activation code. To check a letter, call OneMain using the number on your loan statement or OneMain's website — not a number from an unexpected email or text.
Can I get money from the 13-state attorneys general lawsuit?
Not directly, and not yet. The states seek restitution for borrowers charged for add-on products, but as of October 2026 we found no reported settlement or judgment. There is nothing to file now; watch the attorneys general's announcements for any restitution process.
What should I do right now?
Enroll in the free TransUnion monitoring before December 31, 2026, freeze your credit at all three bureaus, and keep the notice letter. To watch for a future settlement, check open class action settlements.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.
Related Consumer Brand Lawsuits
Open Class Action Settlements
Settlements you can still file a claim in, with deadlines
Data Breach Settlement Calculator
Estimate what a breach settlement could pay you
Class Action Payout Calculator
How fund size and claim rates shape your check
700Credit Data Breach Settlement
Another breach exposing lender and credit data