Eisen Data Breach
The 2025 Eisen data breach occurred when a file containing personal information was shared in response to a fraudulent request made to look as though it came from the California State Controller's Office. Eisen has not publicly disclosed the total number of people affected.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
6- Names
- Physical addresses
- Email addresses
- Social security numbers
- Dates of birth
- Financial information
About This Breach
Eisen is a technology platform that helps financial institutions manage unclaimed property, disbursement, and regulatory compliance. The affected information was held as part of unclaimed-property compliance services Eisen provided to third-party companies.
How Did the Incident Occur?
On December 12, 2025, an attacker impersonated the California State Controller's Office and requested a file containing unclaimed-property compliance records. An employee believed the request was a legitimate government inquiry and shared the file. Eisen identified the request as fraudulent shortly afterward and contained the incident.
What Information Was Affected?
According to the official notice, the file contained names, mailing addresses, email addresses, Social Security numbers, dates of birth, and unclaimed-property balance information. These fields can support identity theft and targeted fraud and should be monitored carefully.
How Did Eisen Respond?
The company revoked the unauthorized party's access, deleted the file from the sharing platform, and investigated whether any additional data had been exposed. It required secondary verification for government data requests, increased employee training, and offered notice recipients 24 months of free credit monitoring and identity-restoration assistance.
What Should Affected People Do?
Notice recipients should review credit reports and financial accounts for unfamiliar activity. People whose Social Security numbers were involved may consider a credit freeze or fraud alert. Unexpected file or information requests referring to unclaimed property, a state agency, or a refund should be verified through the agency's known official channel.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
