Oxford Companies Data Breach Lawsuit Investigation

Key Facts About the Oxford Companies Breach

• Discovery date: February 10, 2025
• Consumer notifications mailed: January 26, 2026
• Regulatory filing: Maine Attorney General on January 27, 2026
• Data exposed: name, address and Social Security number (related to deceased individuals)
• Free services offered: 12 months of Cyber Monitoring from Cyberscout (TransUnion)

Timeline of Events

Oxford Companies detected unusual network activity on February 10, 2025. Immediate actions included disconnecting network access and engaging a specialized third-party cybersecurity firm to investigate. The forensic review confirmed that certain files were accessed by an unauthorized actor. A detailed data-mining analysis then identified whose information was affected, and the final notification list was completed on January 8, 2026.

Information Impacted

The investigation determined that the following personal details may have been viewed or obtained without permission:

• Name
• Address
• Social Security Number

Oxford Companies’ Response

According to the notice filed with the Maine Attorney General, Oxford Companies:

• Disconnected all network access immediately after discovery
• Changed administrative credentials and restored operations in a secure mode
• Enhanced security measures to reduce the risk of future incidents
• Enlisted Cyberscout to provide complimentary Cyber Monitoring for 12 months

Your Next Steps

If you received a letter, you can:

1. Enroll in the free Cyber Monitoring service within 90 days of the letter date using the unique code provided.
2. Review the deceased individual’s credit reports for any unfamiliar activity.
3. Consider placing a fraud alert with the major credit bureaus.
4. Consult with a consumer-rights attorney about potential legal claims.

Company Overview

Oxford Companies operates in commercial real estate and property management.

• Website: oxfordcompanies.com
• Headquarters: 777 E. Eisenhower Pkwy Suite 850, Ann Arbor, MI, United States
• Founded: 1998
• Industry: Real Estate
• Employees: 73
• Contact: Contact Oxford
• Social: LinkedIn | Facebook | Instagram

Frequently Asked Questions

I received a data breach letter from Oxford Companies — what should I do?

Confirm the letter is genuine, enroll in the complimentary Cyber Monitoring within 90 days, and monitor credit reports for any unusual activity. Retain all correspondence for your records.

How do I submit a claim related to the Oxford Companies data breach?

Individuals who experienced financial harm can speak with a data-privacy attorney about filing a claim. Save proof of any out-of-pocket expenses or unauthorized transactions.

Am I eligible to join a lawsuit against Oxford Companies?

Eligibility depends on whether your personal information was involved and if you suffered measurable damages. An attorney can evaluate your situation using the breach notice and any supporting documents.

What information did the Oxford Companies breach expose?

The incident involves names, addresses and Social Security numbers connected to deceased individuals.

Did Oxford Companies offer credit monitoring, and for how long?

Yes. Oxford Companies is offering 12 months of Cyber Monitoring services through Cyberscout at no cost.

How can I get the official breach notice (PDF) for Oxford Companies?

You can download it directly from the Maine Attorney General’s website using the button provided above or this link.