Eisner Advisory Group LLC Data Breach Notice (Oregon Attorney General)

The filing from Eisner Advisory Group LLC, reported to the Oregon Department of Justice on April 08, 2025, states that personal information belonging to 84,795 people was exposed. If you received a notification from the firm, this means some of your records held by them are now outside their control.

What the Exposure Actually Changes for You

The record lists only one broad category: personal information. Because the filing does not name Social Security numbers, financial account details, driver’s license numbers, or any other specific data type, the precise risk depends on what your own notification letter says. The letter is the only reliable way to know exactly which elements of your information were included.

No passwords were exposed. This is genuinely good news. There is no need to change any password connected to Eisner Advisory Group because credential material was not part of the incident. Your account itself remains under your control.

The Long-Term Risk That Remains

Even without permanent government identifiers being named in the filing, any personal information taken from an advisory firm can still be used to support identity theft or fraud attempts. Attackers who obtain names combined with contact details, dates of birth, or account history often use that foundation to build convincing impersonation scenarios or to answer security questions on other services.

Because the filing does not disclose when the incident occurred, you cannot measure how long the information may have been available. The only date we have is April 08, 2025, when the state received the formal notice. The letter you receive (or have already received) is therefore the single concrete signal available to you.

How to Determine Whether You Are Affected

Eisner Advisory Group is required to notify affected Oregon residents directly, usually by mail. If you have not received a letter, it is likely your records were not part of the group of 84,795 people named in this filing. However, if you have moved addresses since the time your records were active with the firm, contact Eisner Advisory Group directly to confirm whether you were included. Absence of a letter is meaningful but not absolute proof.

What This Filing Does Not Tell Us

The notification does not describe how the information was accessed, whether it was copied or simply viewed, or the specific attack method used. It also does not state that any permanent identifiers such as Social Security numbers were involved. These details remain undisclosed. What matters for you is the concrete information listed in your personal notification letter, not the broad category reported to the state.

Practical Steps That Address the Actual Exposure

• Review your notification letter carefully. It will list the exact data fields that applied to you. This single document tells you more than the state filing.
• Place a fraud alert with the three major credit bureaus. A fraud alert forces lenders to verify your identity before opening new accounts and is the most effective single step when personal information leaves an advisory firm.
• Monitor your financial accounts and tax filings for unexpected activity. Because advisory records often contain banking or investment details, review statements for transactions you did not authorize.
• Be wary of unsolicited contact claiming to be from Eisner Advisory Group or any financial institution. Use known good phone numbers or log directly into accounts rather than clicking links or providing information in response to inbound calls or emails.
• If you have not received a letter but believe you should have, contact Eisner Advisory Group’s privacy or compliance team directly. Ask them to confirm whether your records were in the affected population.

The exposure of personal information from an advisory relationship creates a persistent but manageable risk. The steps above focus on the parts you can still control: early detection, lender verification, and direct confirmation with the organisation. The record itself is narrow. Your letter is the authoritative source for what actually applies to you.