State records show Burney Company notified the New Hampshire Attorney General of a data breach on July 10, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official New Hampshire AG notice for Burney Company identifies the following exposed data:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
The Burney Company operates as a wealth management and financial advisory firm, delivering comprehensive investment management, financial planning, and fiduciary services to individuals, families, and institutional clients. Because of the nature of its operations, Burney Company occupies a position of profound trust, managing high-net-worth portfolios, retirement accounts, and complex estate plans. To perform these fiduciary services effectively, the firm routinely collects, processes, and stores an extensive volume of highly sensitive personal and financial data. This includes detailed asset valuations, tax identification numbers, banking details, and comprehensive personal background information necessary for constructing customized financial strategies.
In 2025, Burney Company reported a data security incident to the New Hampshire Attorney General, raising serious concerns regarding the integrity and security of its digital infrastructure. While the exact vector of the breach remains under investigation, incidents affecting financial institutions typically involve sophisticated cyberattacks such as unauthorized network intrusions, ransomware deployment, or third-party vendor compromises. Financial firms are prime targets for malicious actors seeking to exploit vulnerabilities in network perimeters, cloud storage repositories, or legacy software systems to exfiltrate proprietary and client-held data.
The exposure resulting from a financial sector data breach presents severe, long-term risks to affected individuals. The compromised data categories commonly include full names, Social Security numbers, dates of birth, financial account numbers, and routing details. When cybercriminals obtain this combination of personal and financial identifiers, victims face an immediate and elevated threat of identity theft, unauthorized account takeovers, fraudulent loan applications, and targeted phishing scams. The illicit use of Social Security and banking numbers can severely disrupt a victim's financial well-being, often requiring years of credit monitoring and financial remediation to resolve.
As a financial advisory firm handling sensitive consumer data, Burney Company is subject to stringent federal and state regulatory frameworks, including the Gramm-Leach-Bliley Act (GLBA) and applicable state data protection statutes. These laws mandate that financial institutions implement robust administrative, technical, and physical safeguards to protect non-public personal information from unauthorized access and disclosure. The occurrence of a significant data breach strongly suggests potential failures in maintaining these mandatory security standards, raising questions about whether adequate encryption, multi-factor authentication, and continuous threat monitoring were properly enforced.
Receiving a data breach notification letter from Burney Company is a formal acknowledgment that your private financial information was compromised due to inadequate security measures. Under the law, this notification establishes the legal standing necessary to participate in a class action lawsuit against the company. Affected individuals do not need to prove that they have already suffered direct financial loss or identity theft to seek legal recourse and demand accountability. Our law firm handles these complex data privacy cases on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from Burney Company
You were a customer, patient, employee, or client of Burney Company
Your personal information was stored in Burney Company's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Your Burney Company notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Claims windows close. Our team reviews Burney Company breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Burney Company's systems.
Reported to Attorney General
July 10, 2025
Burney Company's disclosure was logged with the New Hampshire Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Compensation in a case like Burney Company's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
Other companies have notified the New Hampshire AG of breaches. Received one of these letters as well? You may have more than one claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris