The New Hampshire Attorney General's office lists a data breach report from Corban OneSource, LLC, filed February 4, 2026. Companies in this situation send legally required notification letters to affected individuals — if you found Corban OneSource, LLC's letter in your mail, this page explains what it means and what you can do.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the New Hampshire Attorney General filing, the Corban OneSource, LLC incident compromised these categories of personal information:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Corban OneSource, LLC operates as a specialized human resources outsourcing and back-office payroll administration provider, functioning as an invisible engine for numerous mid-sized and enterprise businesses. In this capacity, Corban OneSource manages critical administrative functions, including multi-state payroll processing, benefits administration, employee onboarding, and human resources data management. Because of this operational footprint, the company serves as a centralized repository for vast amounts of highly sensitive, confidential employee records. Employers routinely entrust Corban OneSource with comprehensive personnel dossiers to facilitate direct deposit payroll, tax withholding, and health insurance administration, giving the organization custody of data that spans an individual's entire professional and financial identity.
In 2026, Corban OneSource, LLC formally reported a significant cybersecurity incident to the New Hampshire Attorney General's office, alerting state regulators and affected individuals to a compromise of its network infrastructure. While specific technical forensics often vary in complex third-party administrative breaches, incidents of this nature typically involve sophisticated cyberattacks, such as unauthorized network intrusions, ransomware deployment, or credential harvesting that targets internal databases and legacy file-transfer systems. Because payroll and HR service providers manage interconnected networks linking multiple corporate clients and financial institutions, a single breach point can expose systemic vulnerabilities, allowing malicious actors prolonged and undetected access to deep-seated enterprise environments.
The data compromised in the Corban OneSource breach goes far beyond standard contact information, encompassing the foundational pillars of personal identity and financial security. Exposed records frequently include full legal names, Social Security numbers, dates of birth, home addresses, banking and direct deposit account details, wage and compensation histories, and detailed tax withholding documents. The exposure of this specific constellation of information creates immediate and severe risks for victims. Social Security numbers and banking details enable bad actors to execute identity theft, open fraudulent lines of credit, intercept direct deposits, and file fraudulent tax returns to capture refunds, leaving affected employees to spend years untangling the financial and administrative fallout.
As a custodian of sensitive personnel and financial records, Corban OneSource, LLC was bound by rigorous legal and regulatory duties to implement and maintain robust administrative, technical, and physical safeguards. Under state consumer protection statutes, the Federal Trade Commission Act, and applicable industry data security standards, the company had an affirmative obligation to encrypt stored data, enforce multi-factor authentication, monitor network traffic for anomalous behavior, and conduct regular security audits. The occurrence of a widespread data breach strongly indicates a failure to maintain reasonable security practices, suggesting that structural vulnerabilities or delayed detection mechanisms allowed unauthorized parties to breach systems that should have been fortified against modern cyber threats.
Receiving an official data breach notification letter from Corban OneSource, LLC is a formal acknowledgment that your private information was compromised due to corporate security failures. Legally, the receipt of this notice establishes the concrete injury and standing necessary to participate in a class action lawsuit aimed at holding the company accountable. Under established legal principles, victims are not required to prove that financial fraud has already occurred to seek relief; the increased risk of future identity theft and the costs associated with mitigation are sufficient. Our firm evaluates and pursues these data breach claims on a contingency fee basis, meaning you pay nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Corban OneSource, LLC
You were a customer, patient, employee, or client of Corban OneSource, LLC
Your personal information was stored in Corban OneSource, LLC's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Do not discard the Corban OneSource, LLC letter. It documents your standing as an affected individual — the foundation of any claim you file.
Check your Corban OneSource, LLC letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Deadlines apply to breach claims. A free review of your Corban OneSource, LLC letter takes minutes, and we only get paid if you do.
Security Incident
Prior to AG notification
Corban OneSource, LLC's systems were compromised, exposing stored personal records.
Reported to Attorney General
February 4, 2026
The New Hampshire AG received Corban OneSource, LLC's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to Corban OneSource, LLC letter recipients — the exact mix depends on state law and the data types exposed:
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
These organizations also reported breaches to the New Hampshire Attorney General. If their letters reached you too, each may carry its own claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris