On February 27, 2025, Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc. filed an official data breach notice with the New Hampshire Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the New Hampshire AG show that Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc. confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Valsoft Corporation Inc., operating under business names including AllTrust and Aspire USA, Inc., functions within the complex ecosystem of financial, administrative, and software-driven corporate services. Entities of this nature typically act as enterprise software aggregators and operational platforms, managing vast networks of customer data, corporate records, financial transactions, and sensitive personal information on behalf of businesses and consumers alike. Because of their central role in processing high-volume administrative, insurance, or financial data, companies like Valsoft and its operating subsidiaries hold repositories of exceptionally sensitive personal information. This concentration of high-value data makes them prime targets for malicious actors seeking to exploit systemic vulnerabilities for financial gain.
The security incident reported to the New Hampshire Attorney General in 2025 highlights the persistent vulnerabilities inherent in modern enterprise data management. While specific technical forensics continue to emerge, data breaches affecting technology, insurance, and financial service platforms typically involve unauthorized network intrusions, sophisticated ransomware deployments, or third-party vendor compromises. In incidents of this scale, threat actors often target legacy databases, cloud storage buckets, or administrative credentials to gain unauthorized entry. Once inside, attackers can dwell undetected for extended periods, exfiltrating vast archives of confidential corporate and consumer files before the organization detects the breach and initiates containment protocols.
The exposure of sensitive personal information in this breach creates severe, long-term risks for affected individuals. Depending on the precise services utilized by AllTrust and Aspire USA, compromised records frequently include full legal names, dates of birth, Social Security numbers, financial account details, policy identifiers, and confidential administrative data. When cybercriminals obtain Social Security numbers and financial identifiers, victims face an immediate and lifelong risk of identity theft, fraudulent credit card applications, unauthorized bank loans, and tax fraud. Furthermore, the compromise of administrative or insurance-related documentation exposes individuals to targeted phishing campaigns, social engineering attacks, and medical or financial account takeover, requiring constant vigilance and credit monitoring to mitigate ongoing threats.
Under state and federal data protection frameworks, including the Federal Trade Commission Act and applicable New Hampshire consumer protection statutes, Valsoft Corporation Inc., AllTrust, and Aspire USA, Inc. maintained a strict legal duty to implement and maintain reasonable cybersecurity measures. These statutory obligations require companies handling sensitive personal data to utilize robust encryption, multi-factor authentication, regular vulnerability testing, and effective access controls. The occurrence of a significant data breach strongly suggests a potential failure in these administrative and technical safeguards. When an entity fails to secure its networks adequately, it breaches its foundational duty to protect consumers from foreseeable cyber threats, giving rise to potential legal liability under consumer protection and negligence laws.
Receiving a formal data breach notification letter from Valsoft, AllTrust, or Aspire USA serves as official legal acknowledgment that your private information was compromised due to inadequate data security. Legally, this notification establishes the standing necessary to participate in a class action lawsuit aimed at holding the responsible corporation accountable. Affected individuals do not need to demonstrate actual financial loss or identity theft to pursue legal claims; the mere exposure of private data and the resulting necessity of spending time and money on protective measures constitute actionable harm. Our law firm is actively investigating potential class action claims on behalf of impacted individuals on a contingency fee basis, meaning there are never any out-of-pocket costs or attorney fees unless we successfully recover compensation on your behalf.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc.
You were a customer, patient, employee, or client of Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc.
Your personal information was stored in Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc.'s systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Do not discard the Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc. letter. It documents your standing as an affected individual — the foundation of any claim you file.
Activate the complimentary credit monitoring referenced in Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc.'s letter — early fraud detection and a documented harm record both help your claim.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Claims windows close. Our team reviews Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc. breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc.'s systems.
Reported to Attorney General
February 27, 2025
Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc.'s disclosure was logged with the New Hampshire Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Several forms of recovery may be available to Valsoft Corporation Inc. dba AllTrust and Aspire USA, Inc. letter recipients — the exact mix depends on state law and the data types exposed:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
These organizations also reported breaches to the New Hampshire Attorney General. If their letters reached you too, each may carry its own claim.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris