State records show Rollstone Bank & Trust notified the New Hampshire Attorney General of a data breach on July 3, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the New Hampshire Attorney General filing, the Rollstone Bank & Trust incident compromised these categories of personal information:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Rollstone Bank & Trust operates as a traditional financial institution, providing essential banking, lending, and wealth management services to individuals, families, and commercial enterprises. As a trusted custodian of personal capital and private financial lives, the institution maintains vast repositories of highly sensitive consumer data. This includes core banking records, transaction histories, credit profiles, loan applications, and government-issued identification numbers required for regulatory compliance and everyday financial transactions. Because financial institutions are primary targets for cybercriminals seeking direct monetary gain or valuable Personally Identifiable Information, maintaining rigorous cybersecurity defenses is an absolute operational necessity.
In 2025, Rollstone Bank & Trust reported a significant data security incident to the New Hampshire Attorney General's office. While the precise vector of the attack continues to be evaluated, breaches affecting financial institutions typically involve sophisticated cyberattacks such as unauthorized access to internal database servers, vulnerabilities within third-party vendor software, or targeted ransomware deployments. In the banking sector, attackers frequently probe digital infrastructure to intercept sensitive consumer files, exploit legacy system weaknesses, or compromise network credentials, exposing enterprise environments and the confidential records stored within them.
When a financial institution suffers a breach of this magnitude, the compromised data categories typically encompass a dangerous combination of financial account numbers, Social Security numbers, full names, dates of birth, routing numbers, and login credentials. The exposure of these specific data elements creates immediate and severe risks for affected consumers. Financial account numbers and routing numbers expose victims to unauthorized withdrawals, fraudulent transfers, and direct account takeover. Simultaneously, the combination of Social Security numbers and dates of birth provides identity thieves with the permanent building blocks necessary to open fraudulent credit lines, apply for unauthorized loans, and commit complex tax or synthetic identity fraud.
Rollstone Bank & Trust is bound by stringent federal and state regulatory frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and applicable New Hampshire state data protection laws. Under the GLBA, financial institutions have an affirmative legal obligation to establish administrative, technical, and physical safeguards to protect customer nonpublic personal information. The occurrence of a data breach resulting in the exposure of sensitive consumer records strongly indicates a failure in these mandatory security protocols, raising serious questions about whether the institution deployed adequate encryption, multi-factor authentication, and continuous threat monitoring.
Receiving a formal data breach notification letter from Rollstone Bank & Trust is a formal acknowledgment by the institution that your private information was compromised due to their security failure. Legally, this notification establishes the necessary standing for affected consumers to participate in a class action lawsuit aimed at holding the bank accountable for failing to safeguard their data. Importantly, victims do not need to prove that they have already suffered actual financial loss or identity theft to seek legal recourse. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Rollstone Bank & Trust
You were a customer, patient, employee, or client of Rollstone Bank & Trust
Your personal information was stored in Rollstone Bank & Trust's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the Rollstone Bank & Trust letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Activate the complimentary credit monitoring referenced in Rollstone Bank & Trust's letter — early fraud detection and a documented harm record both help your claim.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Claims windows close. Our team reviews Rollstone Bank & Trust breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
An unauthorized party accessed Rollstone Bank & Trust systems that stored personal information.
Reported to Attorney General
July 3, 2025
The New Hampshire AG received Rollstone Bank & Trust's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to Rollstone Bank & Trust letter recipients — the exact mix depends on state law and the data types exposed:
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
These organizations also reported breaches to the New Hampshire Attorney General. If their letters reached you too, each may carry its own claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris