Thompson & Horton, LLP Data Breach — Class Action Review

Thompson & Horton, LLP is a prominent law firm specializing in representation for educational institutions, government entities, and corporate clients, requiring them to handle extensive and highly sensitive documentation. Because of the nature of their legal practice, the firm routinely collects, processes, and stores vast quantities of confidential records, including proprietary corporate data, personnel files, internal communications, and personally identifiable information belonging to employees, clients, and third parties. This heavy reliance on digital document management systems makes law firms prime targets for cybercriminals seeking high-value confidential data.

In 2025, Thompson & Horton, LLP reported a significant data security incident to the New Hampshire Attorney General. While investigations into legal sector breaches often reveal sophisticated cyberattacks such as ransomware deployments, unauthorized network intrusions, or compromised third-party vendor platforms, such events typically expose vulnerabilities in perimeter security or employee credential management. Threat actors frequently target law firms precisely because the vast array of files housed within their networks contains rich targets for exploitation, corporate espionage, or illicit monetization on the dark web.

The exposure resulting from the Thompson & Horton, LLP breach implicates multiple categories of sensitive personal and professional data, each carrying distinct and severe risks for affected individuals. Compromised information often includes full legal names, dates of birth, Social Security numbers, financial account details, tax documents, and confidential legal or personnel correspondence. When Social Security numbers and dates of birth are leaked, victims face an elevated, long-term risk of identity theft, fraudulent credit card applications, unauthorized loans, and tax fraud. Furthermore, compromised professional and legal records can expose sensitive corporate negotiations, employment disputes, and private personal histories to malicious actors.

As a professional services entity handling confidential data, Thompson & Horton, LLP had profound legal and ethical obligations to implement robust cybersecurity measures to safeguard the information entrusted to them. Under state data protection laws and common law duty of care standards, law firms are required to maintain reasonable security practices, encrypt sensitive files, deploy continuous network monitoring, and promptly patch known vulnerabilities. A breach of this magnitude strongly indicates potential failures in these critical security protocols, raising serious questions about whether the firm adhered to industry-standard data protection frameworks.

Receiving a data breach notification letter from Thompson & Horton, LLP is a formal acknowledgment that your private information was compromised due to inadequate security safeguards. Legally, this notice establishes your standing to participate in a class action lawsuit aimed at holding the firm accountable for failing to protect your data. Importantly, victims do not need to prove that financial fraud has already occurred to join a class action; the increased risk of future identity theft and the loss of privacy are sufficient grounds for legal action. Our law firm is evaluating potential claims on a contingency fee basis, meaning you pay nothing unless we successfully recover compensation on your behalf.