The New Hampshire Attorney General's office lists a data breach report from American Pensions Advisors, Inc., filed September 17, 2025. Companies in this situation send legally required notification letters to affected individuals — if you found American Pensions Advisors, Inc.'s letter in your mail, this page explains what it means and what you can do.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official New Hampshire AG notice for American Pensions Advisors, Inc. identifies the following exposed data:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
American Pensions Advisors, Inc. operates as a specialized financial and retirement services firm, acting as a trusted administrator and advisor for complex employee benefit plans, defined benefit pensions, and 401(k) portfolios. Because of its core business model, the company routinely collects, processes, and maintains vast repositories of highly confidential records for thousands of plan participants, retirees, and beneficiaries. This sensitive information is essential for calculating benefits, managing tax withholdings, issuing distributions, and maintaining regulatory compliance with federal and state oversight bodies. Consequently, American Pensions Advisors functions as a critical custodian of generational wealth and sensitive personal identities, making its digital infrastructure a high-value target for malicious actors seeking lucrative financial data.
In 2025, American Pensions Advisors, Inc. formally reported a significant security incident to the New Hampshire Attorney General, alerting affected individuals and regulatory authorities to an unauthorized compromise of its network systems. Incidents affecting pension and financial advisory firms typically involve sophisticated cyberattacks such as unauthorized database access, ransomware deployments, or third-party vendor compromises that bypass traditional perimeter defenses. When attackers infiltrate these environments, they often gain persistent, undetected access to legacy databases and cloud storage repositories where decades of client and participant records are historically stored. This exposure can leave sensitive corporate and individual files vulnerable to exfiltration before the intrusion is even detected by internal monitoring teams.
The data compromised in this breach extends far beyond basic contact details, encompassing core identifiers that expose victims to severe, lifelong financial risks. Exposed records typically include full legal names, dates of birth, Social Security numbers, banking and direct deposit account details, tax withholding preferences, and comprehensive retirement account balance and distribution histories. The exposure of Social Security numbers combined with financial account information and detailed pension records creates an immediate danger of targeted identity theft, fraudulent bank account takeovers, unauthorized loan applications, and complex tax fraud. Malicious actors can leverage these credentials to intercept forthcoming pension distributions or redirect retirement funds, inflicting catastrophic and permanent financial injury on retirees who have limited time or earning capacity to recover lost assets.
As a financial services provider handling sensitive consumer and retirement data, American Pensions Advisors, Inc. was legally bound by stringent regulatory frameworks, including the Gramm-Leach-Bliley Act (GLBA), federal trade commission guidelines, and applicable state data privacy laws. These legal mandates require financial institutions and retirement administrators to maintain robust administrative, technical, and physical safeguards—such as multi-factor authentication, rigorous network monitoring, data encryption, and regular third-party security audits—to protect non-public personal information. The occurrence of this data breach strongly indicates a failure to maintain these required security standards, raising serious questions about whether the company adequately fortified its systems against foreseeable cyber threats and whether it met its legal duty of care to protect its clients' most sensitive data.
Receiving an official data breach notification letter from American Pensions Advisors, Inc. serves as formal legal admission that your private records were compromised due to corporate inadequate security measures. Under established legal principles, this notification establishes the necessary legal standing to participate in a class action lawsuit aimed at holding the company accountable for its security failures. Affected individuals do not need to prove that financial fraud has already occurred to seek legal recourse; the imminent and ongoing risk of identity theft is itself a compensable harm. Our law firm is actively investigating claims on behalf of impacted individuals, and all cases are handled on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from American Pensions Advisors, Inc.
You were a customer, patient, employee, or client of American Pensions Advisors, Inc.
Your personal information was stored in American Pensions Advisors, Inc.'s systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Keep the American Pensions Advisors, Inc. letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Check your American Pensions Advisors, Inc. letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Place security freezes at all three bureaus — Equifax, Experian, TransUnion. New-account fraud dies at the freeze; you can unfreeze temporarily for legitimate applications.
Claims windows close. Our team reviews American Pensions Advisors, Inc. breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in American Pensions Advisors, Inc.'s systems.
Reported to Attorney General
September 17, 2025
American Pensions Advisors, Inc.'s disclosure was logged with the New Hampshire Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Breach victims may recover several categories of loss. What applies in the American Pensions Advisors, Inc. matter depends on your state, the data involved, and the company's conduct.
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
Other companies have notified the New Hampshire AG of breaches. Received one of these letters as well? You may have more than one claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris