On June 9, 2025, Oldman Sallus & Gold LLP filed an official data breach notice with the New Hampshire Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the New Hampshire Attorney General filing, the Oldman Sallus & Gold LLP incident compromised these categories of personal information:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Oldman Sallus & Gold LLP operates as a prominent professional services entity, specifically functioning as a premier law firm handling complex litigation, corporate counseling, intellectual property, estate planning, and high-stakes financial transactions. Because of the sophisticated nature of their legal practice, the firm routinely collects, processes, and maintains vast repositories of highly confidential information. This includes sensitive client files, corporate trade secrets, detailed financial records, trust account details, internal communications, and comprehensive personally identifiable information belonging to clients, opposing parties, employees, and third-party contractors.
In 2025, Oldman Sallus & Gold LLP officially reported a significant data security incident to the New Hampshire Attorney General. While the precise mechanics of the breach continue to be scrutinized, security incidents affecting legal institutions typically involve sophisticated cyberattacks such as unauthorized network intrusion, ransomware deployment, or third-party vendor compromises. Law firms represent prime targets for malicious actors precisely because they serve as central repositories for deeply sensitive corporate and personal data, making them lucrative targets for cybercriminals seeking extortion leverage or valuable records to monetize on the dark web.
Investigations and typical breach profiles for law firms indicate that the compromised data frequently includes full names, Social Security numbers, dates of birth, financial account details, tax documents, proprietary corporate information, and confidential legal documentation. The exposure of this information creates severe, immediate risks for affected individuals. Social Security numbers and dates of birth can be exploited to commit identity theft, open fraudulent lines of credit, or hijack existing financial accounts. Furthermore, compromised legal and tax records expose victims to targeted phishing campaigns, corporate espionage, and complex financial fraud that can take years to detect and resolve.
Oldman Sallus & Gold LLP had strict legal and ethical obligations under state data protection statutes, common law duties of confidentiality, and federal regulatory standards to safeguard the sensitive information entrusted to their care. These legal duties require maintaining robust cybersecurity defenses, implementing multifactor authentication, conducting regular vulnerability assessments, and properly encrypting data both at rest and in transit. A data breach of this magnitude strongly suggests potential failures in these critical security protocols, raising serious questions regarding whether the firm fulfilled its legal obligation to protect private data from foreseeable cyber threats.
Receiving a data breach notification letter from Oldman Sallus & Gold LLP serves as formal legal acknowledgment that your private information was compromised due to inadequate security measures. Under the law, this notification establishes your legal standing to participate in a class action lawsuit aimed at holding the firm accountable for failing to protect your data. You do not need to prove that you have already suffered financial loss to take legal action; simply having your data exposed creates actionable claims. Our law firm handles these data breach cases on a strict contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Oldman Sallus & Gold LLP
You were a customer, patient, employee, or client of Oldman Sallus & Gold LLP
Your personal information was stored in Oldman Sallus & Gold LLP's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the Oldman Sallus & Gold LLP letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Deadlines apply to breach claims. A free review of your Oldman Sallus & Gold LLP letter takes minutes, and we only get paid if you do.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Oldman Sallus & Gold LLP's systems.
Reported to Attorney General
June 9, 2025
Oldman Sallus & Gold LLP filed its official breach notice with the New Hampshire Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Breach victims may recover several categories of loss. What applies in the Oldman Sallus & Gold LLP matter depends on your state, the data involved, and the company's conduct.
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Costs of credit monitoring, identity protection services, and restoration help may all be claimed.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
These organizations also reported breaches to the New Hampshire Attorney General. If their letters reached you too, each may carry its own claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris