The New Hampshire Attorney General's office lists a data breach report from CFD Investments, Inc., filed January 28, 2026. Companies in this situation send legally required notification letters to affected individuals — if you found CFD Investments, Inc.'s letter in your mail, this page explains what it means and what you can do.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the New Hampshire Attorney General filing, the CFD Investments, Inc. incident compromised these categories of personal information:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
CFD Investments, Inc. operates as a prominent financial services and wealth management firm, providing investment advisory, financial planning, and brokerage services to individual investors and institutional clients. Because of the core nature of their business, CFD Investments, Inc. routinely collects, processes, and maintains vast quantities of deeply sensitive financial and personal information. To facilitate investment portfolios, retirement planning, and asset management, the firm requires clients to entrust them with comprehensive financial records, tax documents, and core identification credentials. This heavy concentration of high-value personal data makes financial institutions of this caliber prime targets for malicious actors seeking to monetize stolen identities.
In 2026, CFD Investments, Inc. officially reported a significant data security incident to the New Hampshire Attorney General's office. While the full forensic scope continues to be evaluated, breaches affecting financial institutions typically involve sophisticated cyberattacks such as unauthorized network intrusions, ransomware deployment, credential harvesting, or vulnerabilities within third-party vendor platforms. In the wealth management sector, attackers frequently target legacy databases, employee email environments, or client portals to exfiltrate proprietary financial records and personally identifiable information before security teams can detect or neutralize the breach.
The exposure resulting from the CFD Investments, Inc. breach compromises several categories of high-risk data, each carrying severe potential harms for affected individuals. Exposed information frequently includes full names, Social Security numbers, dates of birth, financial account numbers, routing numbers, and detailed investment or transaction histories. When Social Security numbers and financial account details are compromised, victims face an immediate and prolonged risk of unauthorized account takeovers, fraudulent wire transfers, unauthorized loans, and devastating tax-related identity theft. The loss of private wealth management data leaves clients vulnerable to targeted phishing schemes and multi-factor authentication bypass attempts.
Financial institutions like CFD Investments, Inc. are bound by stringent legal and regulatory frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and applicable state data protection laws. Under the GLBA and FTC Safeguards Rule, financial companies are legally mandated to maintain robust administrative, technical, and physical safeguards to protect nonpublic personal information. The occurrence of a data breach of this magnitude strongly indicates potential failures in cybersecurity infrastructure, inadequate network monitoring, or a failure to properly vet third-party vendors, representing a breach of the duty of care owed to clients.
Receiving a data breach notification letter from CFD Investments, Inc. serves as formal legal notice that your confidential information was compromised due to corporate security failures. Legally, this notification establishes the necessary standing to participate in a class action lawsuit aimed at holding the company accountable for its negligence. Affected individuals do not need to wait until they experience actual financial loss or identity theft to seek legal recourse; the increased risk of future harm is sufficient. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no attorney fees unless we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from CFD Investments, Inc.
You were a customer, patient, employee, or client of CFD Investments, Inc.
Your personal information was stored in CFD Investments, Inc.'s systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Your CFD Investments, Inc. notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Check your CFD Investments, Inc. letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Claims windows close. Our team reviews CFD Investments, Inc. breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in CFD Investments, Inc.'s systems.
Reported to Attorney General
January 28, 2026
The New Hampshire AG received CFD Investments, Inc.'s formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to CFD Investments, Inc. letter recipients — the exact mix depends on state law and the data types exposed:
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris