Ever Care Corporation dba Right at Home Data Breach — Class Action Review

Ever Care Corporation, doing business as Right at Home, operates within the specialized and deeply personal realm of in-home senior care and non-medical assistance. Because the organization coordinates daily living assistance, personal care services, and specialized health support for vulnerable populations, it routinely collects and maintains a vast repository of highly sensitive information. This includes not only comprehensive client intake profiles detailing medical histories, physical conditions, and care plans, but also extensive employment records for caregivers, nurses, and administrative staff. The nature of in-home care requires constant communication and coordination among healthcare proxies, family members, and medical professionals, meaning the company functions as a central hub for confidential personal data.

In 2025, Ever Care Corporation dba Right at Home reported a significant security incident to the New Hampshire Attorney General's office. While the precise vector of the breach remains under thorough investigation, incidents affecting healthcare and caregiving providers typically involve unauthorized access to internal databases, compromise of digital administrative systems, or vulnerabilities within third-party vendor networks. Healthcare and caregiving organizations are prime targets for cybercriminals due to the immense value of the integrated personal and medical data they store. Such breaches often bypass perimeter defenses, allowing malicious actors to dwell undetected within network environments for extended periods before exfiltrating critical files.

The data compromised in this incident likely includes a dangerous mixture of personally identifiable information and protected health details, such as full legal names, dates of birth, Social Security numbers, contact information, and specific care or medical documentation. Exposure of this magnitude creates severe and long-lasting risks for affected individuals. Social Security numbers and dates of birth serve as the keys to identity theft, enabling cybercriminals to open fraudulent lines of credit, file false tax returns, or drain financial accounts. Furthermore, the combination of personal identifiers and care-related records leaves elderly clients and their families uniquely vulnerable to targeted phishing scams, medical identity fraud, and unauthorized attempts to access health insurance benefits.

As an entity handling sensitive healthcare and personal records, Ever Care Corporation dba Right at Home is bound by stringent legal obligations under both federal and state laws, including the Health Insurance Portability and Accountability Act (HIPAA) and state consumer protection statutes. These regulations mandate the implementation of robust administrative, physical, and technical safeguards to ensure the confidentiality, integrity, and security of electronic protected health information. The occurrence of a data breach strongly suggests a potential failure in these statutory duties, raising serious questions regarding whether the company maintained adequate encryption, multi-factor authentication, employee cybersecurity training, and prompt network monitoring protocols.

Receiving a data breach notification letter from Ever Care Corporation dba Right at Home is a formal acknowledgment that your private information was compromised due to corporate security shortcomings. Legally, this notification establishes the necessary standing to participate in a class action lawsuit aimed at holding the company accountable for failing to safeguard your data. Importantly, victims do not need to prove that they have already suffered actual financial loss or identity theft to seek legal redress; the increased, imminent risk of future harm is sufficient. Our law firm is investigating this data breach on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.