On June 2, 2025, Rock Solid Retail dba Nuqleous filed an official data breach notice with the New Hampshire Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
Rock Solid Retail dba Nuqleous's filing with the New Hampshire Attorney General lists these compromised data types:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Rock Solid Retail, doing business as Nuqleous, operates at the intersection of retail technology, supply chain analytics, and enterprise data management. As a specialized provider of advanced software solutions and data insights for major retail brands and consumer goods manufacturers, the company processes immense volumes of proprietary commercial and consumer information. To optimize retail operations, track inventory movements, and analyze consumer purchasing behavior, Nuqleous routinely collects and manages sensitive datasets. This includes corporate credentials, internal employee information, consumer-facing purchase records, and deeply integrated third-party supplier files, making the platform a high-value repository for cybercriminals seeking unauthorized access to corporate and individual data.
The security incident reported by Rock Solid Retail dba Nuqleous to the New Hampshire Attorney General in 2025 highlights the mounting vulnerabilities inherent in modern retail technology ecosystems. While specific forensic details continue to emerge, breaches of this nature typically involve sophisticated cyberattacks such as unauthorized database access, ransomware deployment, or compromise within a third-party vendor supply chain. In the retail tech sector, threat actors frequently exploit misconfigured cloud environments, unpatched software vulnerabilities, or compromised employee credentials to infiltrate internal systems and exfiltrate confidential files before security teams can detect and isolate the intrusion.
The exposure resulting from the Nuqleous data breach potentially encompasses a wide array of sensitive information, including full names, email addresses, mailing addresses, credential hashes, and detailed purchase or transaction histories. The compromise of this data exposes affected individuals to severe, long-term risks. Cybercriminals routinely weaponize retail and corporate credentials to execute credential-stuffing attacks across multiple online platforms, leading to account takeovers and financial fraud. Furthermore, detailed purchase histories and personal identifiers can be leveraged to craft highly convincing, targeted phishing campaigns and orchestrate complex identity theft schemes.
As a commercial enterprise handling sensitive data, Rock Solid Retail dba Nuqleous was bound by robust legal and regulatory obligations to secure its digital infrastructure. Under state data protection statutes, common-law principles of negligence, and Section 5 of the Federal Trade Commission Act, the company had a clear duty to implement and maintain reasonable cybersecurity measures. The occurrence of a successful breach strongly indicates a potential failure in these statutory and common-law duties, such as inadequate encryption protocols, insufficient network monitoring, or a failure to properly vet third-party vendor integrations, leaving the company vulnerable to legal liability.
Receiving an official data breach notification letter from Rock Solid Retail dba Nuqleous is a formal acknowledgment that your private information was compromised due to inadequate corporate security. Legally, the receipt of this notice establishes the concrete injury and standing necessary to participate in a class action lawsuit against the company. Importantly, affected individuals are not required to demonstrate actual financial loss or identity theft to pursue legal recourse; the increased risk of future harm is sufficient under the law. Our firm is actively investigating this breach and evaluates potential claims on a contingency fee basis, meaning you pay nothing out of pocket unless we successfully recover compensation on your behalf.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from Rock Solid Retail dba Nuqleous
You were a customer, patient, employee, or client of Rock Solid Retail dba Nuqleous
Your personal information was stored in Rock Solid Retail dba Nuqleous's systems
Your financial account, credit card, or banking information was disclosed
Your login credentials or passwords were exposed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Do not discard the Rock Solid Retail dba Nuqleous letter. It documents your standing as an affected individual — the foundation of any claim you file.
Check your Rock Solid Retail dba Nuqleous letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Time limits can forfeit your claim. Have attorneys review your Rock Solid Retail dba Nuqleous case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Rock Solid Retail dba Nuqleous's systems.
Reported to Attorney General
June 2, 2025
Rock Solid Retail dba Nuqleous filed its official breach notice with the New Hampshire Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Several forms of recovery may be available to Rock Solid Retail dba Nuqleous letter recipients — the exact mix depends on state law and the data types exposed:
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris