Cooper Health System disclosed a data security incident to the New Hampshire Attorney General on May 23, 2025, triggering legally mandated notification letters. If you are one of the people who received Cooper Health System's letter, your data may have been exposed and you could be entitled to compensation.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the New Hampshire AG show that Cooper Health System confirmed exposure of the information below:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Cooper Health System operates as a prominent healthcare provider, delivering comprehensive medical services, specialized treatments, and clinical care to a vast patient population. In the course of delivering these critical services, the institution routinely collects, processes, and stores an extensive volume of deeply sensitive personal and protected health information. This repository of data includes not only fundamental demographic details but also intricate clinical records, diagnostic histories, and insurance billing information. Because healthcare systems function as hubs for patient care, administrative management, and financial processing, they maintain centralized digital databases that represent high-value targets for malicious actors seeking to exploit systemic vulnerabilities.
In 2025, Cooper Health System reported a data breach incident to the New Hampshire Attorney General, signaling a critical failure in digital defense mechanisms. Security incidents within the healthcare sector typically involve sophisticated cyberattacks such as ransomware deployments, unauthorized intrusions into internal servers, or compromises of third-party vendor networks connected to patient management systems. In many instances, threat actors exploit unpatched software vulnerabilities or utilize compromised employee credentials to gain undetected access to sensitive file repositories, exfiltrating vast amounts of confidential records before security personnel can detect and neutralize the threat.
An incident of this magnitude exposes individuals to severe, multi-faceted risks due to the deeply personal nature of the compromised information. When medical records, Social Security numbers, dates of birth, and health insurance details are exposed, victims face an elevated threat of identity theft, medical fraud, and financial exploitation. Cybercriminals can use stolen health data to fraudulently obtain prescription drugs, bill insurance providers for phantom treatments, or compromise patient credit profiles. Unlike standard financial data, compromised medical histories and diagnostic details cannot be easily altered or replaced, leaving affected individuals vulnerable to long-term privacy violations and ongoing security risks.
As a covered entity under federal law, Cooper Health System was bound by strict statutory mandates under the Health Insurance Portability and Accountability Act (HIPAA), as well as state consumer protection statutes, to safeguard patient data against unauthorized access and disclosure. These legal obligations require the implementation of rigorous administrative, physical, and technical safeguards, including continuous network monitoring, robust data encryption, and regular vulnerability assessments. The occurrence of a data breach strongly indicates a failure to maintain these required security standards, raising significant legal questions regarding whether the institution neglected its duty of care to protect sensitive patient records.
Receiving an official data breach notification letter from Cooper Health System serves as formal acknowledgement that your confidential information was compromised as a result of the organization's security failures. Under established legal principles, the receipt of this notice establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the responsible parties accountable. Affected individuals may be entitled to compensation for out-of-pocket losses, lost time, and the heightened risk of future identity theft, without needing to prove that financial fraud has already occurred. Our firm handles these complex data privacy cases on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Cooper Health System
You were a customer, patient, employee, or client of Cooper Health System
Your personal information was stored in Cooper Health System's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Your Cooper Health System notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Cooper Health System typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Claims windows close. Our team reviews Cooper Health System breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
Cooper Health System's systems were compromised, exposing stored personal records.
Reported to Attorney General
May 23, 2025
Cooper Health System's disclosure was logged with the New Hampshire Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Breach victims may recover several categories of loss. What applies in the Cooper Health System matter depends on your state, the data involved, and the company's conduct.
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris