State records show Upper Dublin Family Dentistry notified the New Hampshire Attorney General of a data breach on July 21, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the New Hampshire AG show that Upper Dublin Family Dentistry confirmed exposure of the information below:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Upper Dublin Family Dentistry operates as a vital community healthcare provider, delivering comprehensive dental services ranging from routine preventative care and cleanings to complex restorative procedures, oral surgery, and orthodontics. Because dental practices function as integral components of the broader healthcare delivery system, they routinely capture and store an extensive volume of highly sensitive patient information. To facilitate appointments, coordinate specialized care, and process insurance claims, the practice must collect not only basic demographic details but also detailed medical histories, dental charts, diagnostic imaging, and private health insurance credentials. This convergence of personal and confidential medical data makes dental practices primary targets for cybercriminals seeking to exploit high-value records on the dark web.
In 2025, Upper Dublin Family Dentistry reported a significant data security incident to the New Hampshire Attorney General, raising serious concerns among patients whose records were entrusted to the practice's digital systems. While details surrounding the exact technical vectors continue to be investigated, breaches impacting specialized healthcare providers typically involve sophisticated cyberattacks such as ransomware deployments, unauthorized intrusions into administrative databases, or vulnerabilities within third-party electronic health record (EHR) vendors and scheduling platforms. In many instances, malicious actors exploit outdated security protocols or spear-phishing vectors to gain persistent access to internal networks, evading detection while exfiltrating massive repositories of unencrypted files.
The exposure resulting from the Upper Dublin Family Dentistry breach compromises a dangerous matrix of personal, financial, and protected health information. The compromise of clinical data, such as diagnostic notes and treatment histories, strips away the fundamental privacy patients expect from their healthcare providers. When combined with foundational identifiers like Social Security numbers, dates of birth, and home addresses, this exposed data equips malicious actors with the exact tools needed to perpetrate sophisticated identity theft, medical fraud, and financial account takeover. Victims face a heightened and long-term risk of unauthorized medical procedures being billed to their insurance, fraudulent lines of credit opened in their names, and persistent phishing schemes utilizing authentic healthcare contexts to trick individuals into disclosing further financial details.
As a covered entity handling protected health information, Upper Dublin Family Dentistry was bound by strict legal standards under the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and applicable New Hampshire state consumer protection statutes. These regulatory frameworks impose affirmative legal obligations to implement robust administrative, physical, and technical safeguards, including comprehensive data encryption, routine vulnerability assessments, multi-factor authentication, and employee cybersecurity training. The occurrence of a data breach of this magnitude serves as strong prima facie evidence that the practice may have failed to maintain reasonable and appropriate security measures, thereby breaching its legal duty of care to its patients.
Receiving an official data breach notification letter from Upper Dublin Family Dentistry serves as formal legal acknowledgment that your confidential information was compromised due to inadequate data security practices. Under modern class action jurisprudence, the receipt of such a letter establishes concrete legal standing to pursue litigation against the responsible entity, even before explicit financial fraud manifests. Affected individuals have the right to seek legal recourse to demand systemic security reforms, financial compensation for out-of-pocket losses, and damages for the constant anxiety and time spent mitigating ongoing identity theft risks. Our firm handles data breach class action lawsuits on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only recover fees if we successfully secure a recovery on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Upper Dublin Family Dentistry
You were a customer, patient, employee, or client of Upper Dublin Family Dentistry
Your personal information was stored in Upper Dublin Family Dentistry's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Keep the Upper Dublin Family Dentistry letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Upper Dublin Family Dentistry typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Deadlines apply to breach claims. A free review of your Upper Dublin Family Dentistry letter takes minutes, and we only get paid if you do.
Security Incident
Prior to AG notification
Upper Dublin Family Dentistry's systems were compromised, exposing stored personal records.
Reported to Attorney General
July 21, 2025
The New Hampshire AG received Upper Dublin Family Dentistry's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Breach victims may recover several categories of loss. What applies in the Upper Dublin Family Dentistry matter depends on your state, the data involved, and the company's conduct.
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
Other companies have notified the New Hampshire AG of breaches. Received one of these letters as well? You may have more than one claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris