Onset Financial Data Breach Exposes Sensitive Consumer Information On May 2, 2025, Onset Financial, Inc., a Utah-based financial services company specializing in equipment leasing and financing, detected a network security incident in which an unauthorized party accessed certain systems. Despite existing security measures, files containing sensitive personally identifiable information (PII) were compromised. The breach was discovered and contained by the company, which launched an investigation with cybersecurity experts. The probe concluded on November 24, 2025, and affected individuals began receiving notifications in December 2025. Exposed data may include names, Social Security numbers, driver’s licenses, financial account details, credit/debit card numbers, passport numbers, and other sensitive documents such as W2s and pay stubs. Onset Financial reported the breach to the Massachusetts Attorney General on December 16, 2025, and to the Montana Attorney General on December 12, 2025. The filings indicate that at least six individuals in Massachusetts and eleven in Montana were affected. Shamis & Gentile P.A., a class action law firm, is investigating potential legal claims on behalf of impacted individuals. The firm notes that those whose data was exposed may be entitled to compensation under data protection laws.