On September 4, 2025, US HealthConnect, Inc. filed an official data breach notice with the New Hampshire Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
US HealthConnect, Inc.'s filing with the New Hampshire Attorney General lists these compromised data types:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
US HealthConnect, Inc. operates within the health sector as an organization that facilitates critical healthcare-related services, medical education, clinical programming, or healthcare network management. Because of its central position within the medical ecosystem, the company routinely collects, processes, and stores vast amounts of highly sensitive information pertaining to patients, healthcare professionals, and participants in medical programs. This data often includes deep personal health histories, billing details, insurance particulars, and core identifiers required for medical coordination and administrative processing, making the organization a repository for some of the most confidential records in modern commerce.
In 2025, US HealthConnect, Inc. formally reported a security incident to the New Hampshire Attorney General, alerting affected individuals and regulatory authorities that unauthorized actors had compromised its network environment or digital infrastructure. Incidents involving healthcare-adjacent organizations typically stem from sophisticated cyber threats such as targeted ransomware deployments, zero-day vulnerabilities in enterprise software, or unauthorized access via compromised third-party vendor systems. Attackers frequently probe these digital perimeters seeking entry points to extract proprietary databases, patient directories, and administrative archives before security teams can detect or contain the intrusion.
The data exposed in incidents of this nature generally encompasses a hazardous mix of Personally Identifiable Information (PII) and Protected Health Information (PHI). When elements such as full names, dates of birth, Social Security numbers, medical record identifiers, and insurance policy details are compromised, victims face severe, long-term risks. Exposure of health-related data opens individuals up to targeted medical fraud, where unauthorized parties utilize stolen identities to obtain prescription drugs, bill insurance providers for unrendered treatments, or interfere with legitimate medical histories. Simultaneously, the inclusion of core identity credentials creates an immediate danger of financial account takeover, tax fraud, and pervasive identity theft that can take years to remediate.
As an entity handling sensitive medical and personal information, US HealthConnect, Inc. was legally bound by stringent regulatory frameworks, including the Health Insurance Portability and Accountability Act (HIPAA), state consumer protection statutes, and common-law doctrines of negligence. These legal standards mandate the implementation of rigorous administrative, physical, and technical safeguards—such as robust encryption protocols, multi-factor authentication, regular penetration testing, and continuous network monitoring—to prevent unauthorized data exfiltration. The occurrence of a reportable breach strongly indicates potential failures in these mandatory security protocols, suggesting that the organization may have neglected its legal duty to properly secure and protect the confidential data entrusted to its care.
Receiving an official data breach notification letter from US HealthConnect, Inc. serves as formal legal acknowledgment that your private information was compromised due to inadequate corporate security measures. Under established legal principles, this notification provides impacted individuals with the necessary legal standing to participate in a class action lawsuit aimed at holding the company accountable. Importantly, victims do not need to show proof of actual financial loss or fraudulent activity to seek legal redress; the exposure of your data alone constitutes a compensable injury caused by corporate negligence. Our law firm is investigating this matter on a contingency fee basis, meaning there are never any out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from US HealthConnect, Inc.
You were a customer, patient, employee, or client of US HealthConnect, Inc.
Your personal information was stored in US HealthConnect, Inc.'s systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Your US HealthConnect, Inc. notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Look for the credit-monitoring offer section of your US HealthConnect, Inc. letter and enroll. It is free, and it creates a paper trail of any resulting fraud.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Deadlines apply to breach claims. A free review of your US HealthConnect, Inc. letter takes minutes, and we only get paid if you do.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in US HealthConnect, Inc.'s systems.
Reported to Attorney General
September 4, 2025
US HealthConnect, Inc. filed its official breach notice with the New Hampshire Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Several forms of recovery may be available to US HealthConnect, Inc. letter recipients — the exact mix depends on state law and the data types exposed:
States like New Hampshire may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris