On February 5, 2025, Menorah Life filed an official data breach notice with the New Hampshire Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official New Hampshire AG notice for Menorah Life identifies the following exposed data:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Menorah Life operates within the healthcare and senior care sector, providing comprehensive continuum-of-care services, assisted living, rehabilitation, and specialized nursing care to vulnerable elderly populations. Because of the vital medical and residential services they deliver, Menorah Life routinely collects and maintains extensive repositories of sensitive personal, medical, and financial information. This ecosystem includes detailed electronic health records, insurance verification documents, emergency contact details, and private payment histories for every resident and patient under their care, making them a repository of highly confidential data.
The 2025 security incident reported to the New Hampshire Attorney General highlights the severe cybersecurity vulnerabilities facing organizations in the healthcare sector. Data breaches at senior care facilities typically involve sophisticated cyberattacks such as ransomware deployments, unauthorized intrusions into legacy clinical databases, or compromises of third-party vendors handling administrative and billing workflows. These incidents frequently exploit gaps in network perimeter security, allowing malicious actors to dwell undetected within internal systems and exfiltrate vast amounts of confidential files before detection occurs.
The exposure resulting from the Menorah Life incident places affected individuals at immediate risk of severe, long-term harm. Compromised categories typically include full legal names, dates of birth, Social Security numbers, protected health information such as diagnoses and treatment histories, health insurance identification numbers, and financial account details. In the healthcare sector, the theft of Social Security numbers combined with detailed medical records enables bad actors to commit comprehensive identity theft, fraudulent medical billing, prescription fraud, and tax refund scams, leaving victims to navigate years of financial and emotional distress.
Under federal and state law, including the Health Insurance Portability and Accountability Act (HIPAA) and New Hampshire consumer protection statutes, Menorah Life had a strict legal obligation to implement and maintain robust administrative, physical, and technical safeguards to protect sensitive electronic protected health information. The occurrence of a successful data breach strongly indicates a failure to adhere to these mandated security standards, potentially exposing the organization to significant legal liability for negligence and failure to adequately protect consumer data.
Receiving a formal data breach notification letter from Menorah Life serves as a legal admission that your confidential records were compromised due to corporate security failures. This notification establishes the legal standing necessary to participate in a class action lawsuit aimed at holding Menorah Life accountable and securing compensation for the risks and disruptions you now face. Our firm handles these complex data breach cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from Menorah Life
You were a customer, patient, employee, or client of Menorah Life
Your personal information was stored in Menorah Life's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Keep the Menorah Life letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Look for the credit-monitoring offer section of your Menorah Life letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Claims windows close. Our team reviews Menorah Life breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
Menorah Life's systems were compromised, exposing stored personal records.
Reported to Attorney General
February 5, 2025
Menorah Life filed its official breach notice with the New Hampshire Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Breach victims may recover several categories of loss. What applies in the Menorah Life matter depends on your state, the data involved, and the company's conduct.
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
These organizations also reported breaches to the New Hampshire Attorney General. If their letters reached you too, each may carry its own claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris