The New Hampshire Attorney General's office lists a data breach report from Bison State Bank, filed February 9, 2026. Companies in this situation send legally required notification letters to affected individuals — if you found Bison State Bank's letter in your mail, this page explains what it means and what you can do.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the New Hampshire AG show that Bison State Bank confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Bison State Bank operates as a regional financial institution dedicated to providing community banking, commercial lending, wealth management, and residential mortgage services. Because financial institutions function as modern repositories for virtually every aspect of a customer's economic life, Bison State Bank routinely collects, processes, and stores vast quantities of high-value personal and financial information. Customers entrust the bank with sensitive data ranging from daily transaction logs and account balances to core identifiers necessary for loan origination, credit evaluation, and asset management. The sheer volume and sensitivity of this information make community and regional banks prime targets for cybercriminal syndicates seeking to monetize stolen financial records on the dark web.
In 2026, Bison State Bank formally reported a significant security incident to the New Hampshire Attorney General's office, alerting account holders and regulatory authorities to a compromise of its digital infrastructure. While investigations into financial sector breaches frequently point toward sophisticated cyberattacks—such as unauthorized access to legacy databases, credential stuffing operations, third-party vendor software vulnerabilities, or ransomware deployments—the underlying reality remains that core banking networks demand rigorous, multilayered defense mechanisms. When threat actors successfully penetrate a financial institution's defenses, they gain unfettered visibility into environments designed to handle high-volume monetary transactions and deeply personal customer profiles.
The exposure resulting from the Bison State Bank incident involves categories of data that carry severe, long-term risks for affected individuals. Exposed records typically include full legal names, Social Security numbers, dates of birth, bank account numbers, routing numbers, and detailed financial transaction histories. Unlike temporary inconvenience, the compromise of a Social Security number combined with banking details creates an immediate and persistent danger of identity theft, unauthorized account takeovers, fraudulent credit card applications, and tax-fraud schemes. Cybercriminals armed with this information can siphon funds directly from checking and savings accounts, leaving victims to navigate complex recovery processes with financial institutions and credit bureaus.
Under federal and state law, financial institutions like Bison State Bank are bound by strict statutory duties to safeguard consumer information. The Gramm-Leach-Bliley Act (GLBA), alongside state consumer protection statutes, mandates that financial entities maintain comprehensive administrative, technical, and physical safeguards to protect non-public personal information. When a security breach of this magnitude occurs, it often serves as a strong indicator that the institution failed to implement industry-standard security measures—such as robust multi-factor authentication, proactive vulnerability patching, or effective network segmentation—thereby breaching its legal obligations to its depositors and customers.
Receiving an official data breach notification letter from Bison State Bank is a formal admission that your private financial information was compromised due to inadequate security controls. Legally, this notification establishes the foundation and standing required to participate in a class action lawsuit aimed at holding the bank accountable for its negligence. Affected account holders do not need to demonstrate that they have already suffered direct financial loss or fraudulent withdrawals to pursue legal relief; the increased risk of future identity theft and the forced burden of monitoring credit are legally recognized harms. Our firm investigates these data breach matters on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Bison State Bank
You were a customer, patient, employee, or client of Bison State Bank
Your personal information was stored in Bison State Bank's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the Bison State Bank letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Look for the credit-monitoring offer section of your Bison State Bank letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Time limits can forfeit your claim. Have attorneys review your Bison State Bank case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Bison State Bank's systems.
Reported to Attorney General
February 9, 2026
The New Hampshire AG received Bison State Bank's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to Bison State Bank letter recipients — the exact mix depends on state law and the data types exposed:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
Other companies have notified the New Hampshire AG of breaches. Received one of these letters as well? You may have more than one claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris