On April 18, 2025, Moorhead Law Group filed an official data breach notice with the New Hampshire Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
Moorhead Law Group's filing with the New Hampshire Attorney General lists these compromised data types:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Moorhead Law Group operates as a specialized legal practice handling complex matters that routinely require the collection and retention of exceptionally sensitive client, corporate, and financial records. Because law firms function as repositories for confidential communications, proprietary business strategies, estate plans, litigation documents, and personal identifiers, they represent high-value targets for cybercriminals. The nature of legal practice demands that these organizations maintain vast amounts of Personally Identifiable Information (PII) and corporate data to effectively represent their clientele, creating a dense digital footprint that, if compromised, exposes individuals and entities to severe downstream vulnerabilities.
In 2025, Moorhead Law Group reported a significant data security incident to the New Hampshire Attorney General, alerting clients and affected individuals to an unauthorized compromise of its network infrastructure. While investigations into legal sector breaches frequently point toward sophisticated phishing campaigns, compromised employee credentials, or unauthorized access to file-sharing systems, incidents of this scale typically highlight vulnerabilities in network perimeters or legacy database security. Such breaches underscore the persistent threat landscape law firms face as malicious actors increasingly target the legal industry to harvest confidential documents and sensitive personal dossiers.
The breach exposed a wide array of confidential information, which may include full names, Social Security numbers, financial account details, dates of birth, tax documents, and privileged legal correspondence. The exposure of this specific category of data creates profound risks for affected victims, ranging from immediate financial fraud and tax identity theft to corporate espionage and targeted phishing attacks. Because legal files often contain comprehensive background information used for identity verification, bad actors can leverage these records to impersonate victims across financial institutions, open fraudulent accounts, or compromise other secure portals, leaving individuals exposed to long-term financial and reputational harm.
Moorhead Law Group, like all entities handling sensitive personal and financial data, was bound by professional standards, state data security regulations, and common law duties of care to implement robust administrative, physical, and technical safeguards. Under applicable state consumer protection laws and general data security frameworks, the firm had an affirmative legal obligation to maintain encrypted systems, monitor network access, and restrict unauthorized data exfiltration. The occurrence of this security incident strongly suggests a potential failure in these mandated security protocols, raising serious questions about whether adequate cybersecurity measures were deployed to protect client and employee data from foreseeable digital threats.
Receiving a data breach notification letter from Moorhead Law Group is a formal acknowledgment that your confidential information was compromised due to inadequate security infrastructure, and it establishes the legal standing necessary to participate in a class action lawsuit. Affected individuals do not need to wait until financial fraud has actually occurred to seek legal recourse, as the increased risk of future identity theft constitutes a compensable injury under the law. Our firm is currently investigating potential legal claims on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from Moorhead Law Group
You were a customer, patient, employee, or client of Moorhead Law Group
Your personal information was stored in Moorhead Law Group's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Do not discard the Moorhead Law Group letter. It documents your standing as an affected individual — the foundation of any claim you file.
Check your Moorhead Law Group letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Time limits can forfeit your claim. Have attorneys review your Moorhead Law Group case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
An unauthorized party accessed Moorhead Law Group systems that stored personal information.
Reported to Attorney General
April 18, 2025
The New Hampshire AG received Moorhead Law Group's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Breach victims may recover several categories of loss. What applies in the Moorhead Law Group matter depends on your state, the data involved, and the company's conduct.
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
These organizations also reported breaches to the New Hampshire Attorney General. If their letters reached you too, each may carry its own claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris