On October 20, 2025, Rubin Lublin, LLC filed an official data breach notice with the New Hampshire Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the New Hampshire AG show that Rubin Lublin, LLC confirmed exposure of the information below:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Rubin Lublin, LLC operates as a prominent legal services firm, specializing primarily in creditor rights, default servicing, foreclosure processing, and real estate litigation. Because of the nature of its core operations, the firm routinely handles highly sensitive legal, financial, and personal information on behalf of mortgage lenders, financial institutions, and individual consumers. This expansive repository of confidential documentation makes Rubin Lublin, LLC a central repository for intensely private records, including loan documents, default notices, court pleadings, and sensitive financial identifiers.
In 2025, Rubin Lublin, LLC reported a significant data security incident to the New Hampshire Attorney General, alerting affected individuals and regulatory authorities that their systems had been compromised. While the exact vector of the attack remains under scrutiny, security incidents involving legal firms typically stem from sophisticated cyber threats such as targeted ransomware deployments, unauthorized intrusion into legacy document management systems, or vulnerabilities within third-party vendor platforms used for case management and e-discovery. Such intrusions often expose internal file repositories where high-volume, sensitive consumer files are stored.
Based on the types of records maintained by firms specializing in default servicing and financial litigation, the exposed data likely includes full names, Social Security numbers, dates of birth, home addresses, mortgage and loan account numbers, and detailed financial transaction histories. The compromise of this specific combination of data creates severe, immediate risks for victims. Social Security numbers and dates of birth form the bedrock of identity theft, allowing malicious actors to open fraudulent credit accounts, secure unauthorized loans, or intercept tax refunds. Furthermore, exposed mortgage and banking details expose victims to targeted financial fraud, social engineering attacks, and unauthorized account takeovers.
As a professional services entity handling confidential consumer and financial records, Rubin Lublin, LLC was bound by rigorous legal obligations under state data protection statutes, the FTC Act, and industry-standard security frameworks to safeguard this information. These legal duties require maintaining robust administrative, technical, and physical safeguards, including comprehensive encryption, multi-factor authentication, and regular vulnerability assessments. The occurrence of a breach capable of extracting sensitive consumer data strongly suggests a failure in these foundational security protocols, raising serious questions about whether the firm exercised adequate care in protecting the private records entrusted to its custody.
Receiving a formal data breach notification letter from Rubin Lublin, LLC serves as an official acknowledgment that your private information was compromised due to inadequate corporate cybersecurity practices. Legally, this notification establishes the foundation for affected individuals to participate in class action litigation aimed at holding the firm accountable for failing to secure their data. Importantly, victims do not need to prove that they have already suffered direct financial loss or identity theft to seek legal recourse; the increased risk of future harm and the loss of privacy are sufficient grounds. Our firm is currently investigating potential claims on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Rubin Lublin, LLC
You were a customer, patient, employee, or client of Rubin Lublin, LLC
Your personal information was stored in Rubin Lublin, LLC's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Keep the Rubin Lublin, LLC letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Check your Rubin Lublin, LLC letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Time limits can forfeit your claim. Have attorneys review your Rubin Lublin, LLC case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
An unauthorized party accessed Rubin Lublin, LLC systems that stored personal information.
Reported to Attorney General
October 20, 2025
The New Hampshire AG received Rubin Lublin, LLC's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Compensation in a case like Rubin Lublin, LLC's depends on where you live, what was exposed, and how the company responded. Common recovery categories:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris