Eisen Inc. Discloses Data Breach Affecting Financial Institution Clients Eisen Inc., a New York-based fintech company specializing in unclaimed property compliance and account offboarding services, reported a data breach that occurred on December 12, 2025. The company serves banks, brokerages, and digital asset exchanges across the U.S., acting as a third-party provider that stores sensitive personal data on behalf of its financial institution clients. The breach stemmed from a social engineering attack, in which a threat actor impersonated the California State Controller’s Office the agency overseeing unclaimed property in the state. Posing as a legitimate government representative, the attacker requested a file containing unclaimed property compliance records, which an Eisen employee mistakenly provided. The company detected the fraudulent activity shortly after and initiated containment measures. The exposed file contained highly sensitive personal information, including: - Names - Mailing and email addresses - Social Security numbers - Dates of birth - Details about unclaimed property balances Eisen reported the incident to the California Attorney General on June 24, 2026, and began mailing notification letters to affected individuals the same day. In response, Eisen is offering 24 months of complimentary credit monitoring and identity theft restoration services through Experian IdentityWorks, including: - A credit report at signup - Daily monitoring of Experian credit files - Access to identity restoration specialists - $1 million in identity theft insurance Affected individuals can enroll in the program until August 31, 2026, using an activation code provided in their notification letter. A dedicated assistance line (833-931-4422) is available for inquiries, operating Monday through Friday from 8 a.m. to 8 p.m. Central Time.