The New Hampshire Attorney General's office lists a data breach report from BTU International, filed December 26, 2025. Companies in this situation send legally required notification letters to affected individuals — if you found BTU International's letter in your mail, this page explains what it means and what you can do.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
BTU International's filing with the New Hampshire Attorney General lists these compromised data types:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
BTU International operates as a specialized advanced technology and manufacturing enterprise, designing and producing high-performance thermal processing equipment and application solutions primarily utilized in the global electronics, semiconductor, and alternative energy sectors. Because of its standing as a sophisticated engineering and technology firm, the organization maintains a complex corporate infrastructure. This includes robust research and development departments, global supply chain networks, and intricate human resources operations. To support these operations, BTU International routinely collects, processes, and stores vast quantities of sensitive non-public information, ranging from proprietary engineering blueprints and intellectual property to deeply personal employee records, payroll histories, tax documents, and confidential corporate communications.
In 2025, BTU International reported a significant cybersecurity incident to the New Hampshire Attorney General's office, raising severe concerns among current and former personnel regarding the security of their personal information. While the exact initial vector of the compromise continues to be evaluated, security incidents affecting sophisticated technology and manufacturing firms frequently involve unauthorized access to internal enterprise servers, targeted phishing campaigns, or vulnerabilities within third-party vendor software supply chains. Advanced threat actors routinely target entities holding high-value technical data and employee credentials, utilizing sophisticated malware and ransomware to infiltrate corporate perimeters, exfiltrate sensitive files, and encrypt critical enterprise databases before demanding extortion.
The data compromised in incidents involving industrial technology and manufacturing firms typically encompasses a dangerous combination of personally identifiable information and corporate records. Affected individuals often face the exposure of full names, Social Security numbers, dates of birth, home addresses, banking and direct deposit information, and detailed compensation and tax documentation. The unauthorized disclosure of this core identifier data exposes victims to severe, long-term risks, including sophisticated identity theft, tax refund fraud, unauthorized credit card applications, and ongoing financial account takeover. When Social Security numbers and banking details are compromised, victims face an elevated risk of fraudulent loans being opened in their names and the persistent threat of synthetic identity creation, requiring years of vigilant credit monitoring and financial remediation.
As an enterprise operating within New Hampshire and maintaining the sensitive data of employees and business associates, BTU International is bound by state and federal legal obligations to implement and maintain reasonable security measures. Under the New Hampshire Regulation of Business Practices Act and broader common law duties, companies that collect personally identifiable information have an affirmative legal obligation to protect that data from foreseeable cyber threats and unauthorized access. The occurrence of a widespread data breach strongly indicates a potential failure in administrative, physical, or technical safeguards—such as inadequate network segmentation, outdated firewall protocols, or a failure to enforce multi-factor authentication across corporate systems—which may constitute actionable negligence under state law.
Receiving an official data breach notification letter from BTU International is a formal legal admission that your private records were compromised due to corporate security shortcomings. Legally, this notification establishes the foundational standing required to participate in a class action lawsuit aimed at holding the company accountable for its failure to secure your data. Under modern data breach jurisprudence, affected individuals do not need to prove that they have already suffered actual financial loss or identity theft to seek legal recourse; the increased risk of future harm and the necessary expenses of mitigation are sufficient. Our class action law firm handles these complex privacy cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from BTU International
You were a customer, patient, employee, or client of BTU International
Your personal information was stored in BTU International's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Your BTU International notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Look for the credit-monitoring offer section of your BTU International letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Deadlines apply to breach claims. A free review of your BTU International letter takes minutes, and we only get paid if you do.
Security Incident
Prior to AG notification
An unauthorized party accessed BTU International systems that stored personal information.
Reported to Attorney General
December 26, 2025
BTU International filed its official breach notice with the New Hampshire Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Compensation in a case like BTU International's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris