The New Hampshire Attorney General's office lists a data breach report from LiveRez, filed November 20, 2025. Companies in this situation send legally required notification letters to affected individuals — if you found LiveRez's letter in your mail, this page explains what it means and what you can do.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the New Hampshire AG show that LiveRez confirmed exposure of the information below:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
LiveRez operates as a prominent cloud-based property management software and booking platform utilized heavily within the vacation rental and hospitality industry. By centralizing operations for property managers and independent rental owners, the company collects, processes, and stores vast quantities of high-value consumer and operational data. This ecosystem routinely handles detailed reservation schedules, financial transaction records, and highly sensitive guest information necessary for booking luxury and short-term accommodations nationwide.
In 2025, security incident notifications submitted to the New Hampshire Attorney General revealed that LiveRez experienced a significant data security compromise. In the context of hospitality software providers, incidents of this nature typically involve unauthorized third-party intrusion into cloud infrastructure, compromise of internal administrative credentials, or vulnerabilities within integrated third-party booking gateways. Threat actors frequently target reservation management networks to harvest unstructured consumer databases containing a wealth of personally identifiable information.
The exposure resulting from the LiveRez incident compromises several categories of sensitive data, each carrying distinct and severe risks for affected individuals. The breach potentially exposed full names, home addresses, personal email addresses, telephone numbers, and sensitive transaction records or credit card payment histories. Exposure of this granular guest data creates immediate vulnerabilities to targeted phishing campaigns, financial fraud, unauthorized account takeovers, and sophisticated social engineering attacks designed to trick consumers into surrendering additional financial credentials.
As a commercial entity entrusted with consumer data, LiveRez was bound by robust legal obligations under state data protection statutes, common law duty, and the Federal Trade Commission Act to implement and maintain reasonable security measures. These regulatory frameworks require companies handling consumer and financial data to deploy encryption, multi-factor authentication, rigorous access controls, and regular vulnerability monitoring. The occurrence of this breach indicates potential failures in adhering to these baseline industry standards, leaving systems vulnerable to unauthorized intrusion.
Receiving a formal data breach notification letter from LiveRez serves as an official acknowledgment that your private information was compromised due to inadequate security safeguards. Legally, this notification establishes the standing necessary to participate in a class action lawsuit aimed at holding the company accountable for its negligence. Affected individuals do not need to demonstrate actual financial loss or identity theft to pursue legal remedies; simply having personal data exposed creates compensable harm. Our firm is actively investigating potential class action claims on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from LiveRez
You were a customer, patient, employee, or client of LiveRez
Your personal information was stored in LiveRez's systems
Your financial account, credit card, or banking information was disclosed
Your login credentials or passwords were exposed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the LiveRez letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
LiveRez typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Time limits can forfeit your claim. Have attorneys review your LiveRez case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
LiveRez's systems were compromised, exposing stored personal records.
Reported to Attorney General
November 20, 2025
The New Hampshire AG received LiveRez's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Breach victims may recover several categories of loss. What applies in the LiveRez matter depends on your state, the data involved, and the company's conduct.
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris