All Data BreachesNew Hampshire Data Breaches
New Hampshire Data Breach

Caldwell Trust Company Data Breach Notification Letter — Free Case Review

The New Hampshire Attorney General's office lists a data breach report from Caldwell Trust Company, filed September 23, 2025. Companies in this situation send legally required notification letters to affected individuals — if you found Caldwell Trust Company's letter in your mail, this page explains what it means and what you can do.

This breach is real — not a scam
Officially reported to the New Hampshire Attorney General on September 23, 2025
Reviewed by: David S. Harris, Esq. — Data Breach & Class Action Attorney, Licensed in Florida
Free Consultation: (786) 306-7278

Class Action Status

No filed class action is currently recorded in this tracker for the Caldwell Trust Company data breach.

The New Hampshire Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.

  • Caldwell Trust Company reported this breach to the New Hampshire Attorney General on September 23, 2025.
  • According to the New Hampshire Attorney General filing, the affected data includes Full Name, Social Security Number, Financial Account Number, Date of Birth, Routing Number, Tax Return Information, Estate and Trust Documentation, Contact Information.
  • The official New Hampshire Attorney General notice is the source record for this case.
  • Caldwell Trust Company reported this breach to the New Hampshire Attorney General on September 23, 2025.
  • According to the New Hampshire Attorney General filing, the affected data includes Full Name, Social Security Number, Financial Account Number, Date of Birth, Routing Number, Tax Return Information, Estate and Trust Documentation, Contact Information.
  • The official New Hampshire Attorney General notice is the source record for this case.

Breach Details

Company
Caldwell Trust Company
State Reported
New Hampshire
Reported to AG
September 23, 2025
Official AG Filing
View Source

Your Data That Was Exposed

The official New Hampshire AG notice for Caldwell Trust Company identifies the following exposed data:

Full NameSocial Security NumberFinancial Account NumberDate of BirthRouting NumberTax Return InformationEstate and Trust DocumentationContact Information

These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.

What Happened in the Caldwell Trust Company Data Breach

Caldwell Trust Company operates as a premier financial institution, providing comprehensive wealth management, trust administration, estate planning, and fiduciary services to high-net-worth individuals, families, and institutional clients. Because of the nature of its operations, Caldwell Trust Company sits at the custodian intersection of immense personal wealth and deeply sensitive private information. The institution routinely collects, manages, and stores expansive financial portfolios, estate documents, tax returns, and comprehensive personal identification details necessary to execute high-value financial transactions, manage trusts, and administer complex asset allocations on behalf of its clientele.

In 2025, Caldwell Trust Company reported a significant security incident to the New Hampshire Attorney General, alerting clients and regulatory authorities to a compromise of its digital infrastructure. While investigations into such financial sector breaches often center around sophisticated cyberattacks, unauthorized network intrusions, or vulnerabilities within third-party vendor platforms, the overarching reality remains that bad actors actively target wealth management firms to exploit the high-value data they house. Financial institutions are prime targets for cybercriminals seeking to leverage sophisticated social engineering, malware deployment, or zero-day exploits to bypass perimeter defenses and gain unfettered access to internal servers containing confidential client ledgers and account histories.

The exposure resulting from the Caldwell Trust Company breach encompasses an array of highly sensitive personal and financial data categories that pose severe, long-term risks to affected individuals. The compromise of full names, Social Security numbers, dates of birth, and financial account or routing numbers creates an immediate and alarming risk of identity theft, unauthorized wire transfers, and fraudulent account takeovers. Furthermore, because trust and estate management requires extensive documentation, compromised files may include sensitive tax identification data, estate planning records, and historical asset valuations. When cybercriminals obtain this combination of core financial identifiers and wealth-specific documentation, victims face prolonged exposure to sophisticated financial fraud, synthetic identity creation, and targeted phishing schemes designed to drain personal assets.

As a regulated financial institution handling consumer financial data, Caldwell Trust Company was legally bound by stringent regulatory frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and applicable New Hampshire state data protection statutes. These laws impose affirmative legal obligations to implement robust administrative, technical, and physical safeguards to protect non-public personal information from unauthorized access, disclosure, or misuse. Under the GLBA's Safeguards Rule, financial entities must conduct thorough risk assessments, deploy advanced encryption and access controls, and continuously monitor network activity. The occurrence of a data breach of this magnitude serves as a strong indicator of potential systemic failures in meeting these mandatory security standards, raising serious questions regarding whether adequate preventative measures were deployed to shield sensitive client assets and records.

For individuals who have received an official data breach notification letter from Caldwell Trust Company, this correspondence serves as a formal acknowledgment that your private financial information was compromised due to corporate negligence. Legally, the receipt of this notice establishes the necessary standing to participate in a class action lawsuit aimed at holding the institution accountable for failing to safeguard your data. Importantly, victims do not need to prove that financial loss or identity theft has already occurred to seek legal redress; the increased, imminent risk of future harm is sufficient under consumer protection laws. Our law firm is actively investigating potential class action claims on behalf of affected Caldwell Trust Company clients, operating on a strict contingency fee basis—meaning you pay nothing unless we successfully recover compensation on your behalf.

Who May Qualify for Compensation

Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:

You received a data breach notification letter from Caldwell Trust Company

You were a customer, patient, employee, or client of Caldwell Trust Company

Your personal information was stored in Caldwell Trust Company's systems

Your Social Security number or driver's license number was exposed

Your financial account, credit card, or banking information was disclosed

You reside in the United States (all 50 states eligible)

Received a Caldwell Trust Company Notification Letter?

That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.

What your notification letter means & what to do next →

Your 2025 Action Plan — 4 Steps

Four moves to make now — they protect both your identity and your legal position:

1

Save Your Notification Letter

Your Caldwell Trust Company notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.

2

Enroll in Free Credit Monitoring

Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.

3

Place a Credit Freeze at All 3 Bureaus

Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.

4

Contact a Data Breach Attorney — Free

Deadlines apply to breach claims. A free review of your Caldwell Trust Company letter takes minutes, and we only get paid if you do.

Breach Timeline

Security Incident

Prior to AG notification

Someone gained unauthorized access to data held in Caldwell Trust Company's systems.

Reported to Attorney General

September 23, 2025

Caldwell Trust Company's disclosure was logged with the New Hampshire Attorney General's office.

Consumer Notification Letters Sent

Within weeks of AG filing

Notification letters are sent by mail to all individuals whose data was involved.

Legal Window — Act Now

Statute of limitations applies

Claim deadlines apply — waiting can forfeit your right to compensation.

What You May Recover

Compensation in a case like Caldwell Trust Company's depends on where you live, what was exposed, and how the company responded. Common recovery categories:

Statutory Damages

Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.

Out-of-Pocket Losses

Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.

Time & Inconvenience

Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.

Credit Monitoring & Protection

Costs of credit monitoring, identity protection services, and restoration help may all be claimed.

Identity Theft Risk

SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.

Financial Fraud Damages

Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.

New Hampshire Data Breach Law

New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.

⚡ CASES ARE TIME-SENSITIVE — ACT NOW
Call Free Now · (786) 306-7278
Got a Caldwell Trust Company letter? Free 2-min review · No fee unless we win