Basic Search  |  Summaries  |  Advanced Search

Violation Tracker Individual Record

Company: OneMain Financial Group LLC
Current Parent Company: OneMain Holdings
Parent at the Time of the Penalty Announcement:  subscribe to see this data field
Penalty: $4,250,000
Year: 2023
Date: May 25, 2023
Offense Group: consumer-protection-related offenses
Primary Offense: privacy violation
Violation Description: OneMain agreed to pay $4.25 million in settlement of allegations it failed to effectively manage third-party service provider risk, manage access privileges, and maintain a formal application security development methodology, significantly increasing the company's vulnerability to cybersecurity events.
Level of Government: state
Action Type: agency action
Agency: New York Department of Financial Services
Civil or Criminal Case: civil
Facility State: New York
HQ Country of Current Parent: USA
HQ State of Current Parent: Indiana
Ownership Structure of Current Parent: publicly traded
Major Industry of Current Parent: financial services
Specific Industry of Current Parent: financial services
Source of Data: (click here)
Source Notes: If an online information source is not working, check the Violation Tracker Data Sources page for an updated link.
Current parent company note: Parent-subsidiary relationship is current as of the most recent revision listed in the Update Log.