Northeast Rehabilitation Hospital Network Data Breach Lawsuit: A Closed Settlement and a New Claim
Active Litigation
Claim deadline was February 17, 2026 · as of Oct 18, 2026
There are two separate things behind this search. The May 2024 Northeast Rehabilitation Hospital Network data breach already produced a class settlement — its claim deadline was February 17, 2026, and it has closed. Separately, a ransomware group claimed a new attack on September 29, 2026, and six new class actions against the hospital network are now in federal court in New Hampshire. For the 2026 claim there is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
Can I Still File?
The claim deadline, what the settlement pays and where to file — plus other settlements still taking claims.
No. The claim deadline was February 17, 2026.
Other settlements with open claim windows
- SitusAMC Data Breach$5.3M · claim by November 6, 2026
- Kelly Benefits Data Breach$5 million · claim by December 28, 2026
- Wellstar MyChart Lawsuit$4.25M · claim by November 10, 2026
We are not a claims administrator and not affiliated with any settlement. File only at the official settlement website — filing is always free.
What Happened: The 2024 Breach and the 2026 Claim
The 2024 breach. According to its notice letters, Northeast Rehabilitation Hospital Network (NRHN) became aware of suspicious activity on May 22, 2024. An unauthorized person had access to certain systems between May 13 and May 22, 2024 and “viewed or copied” information. The review of affected files finished on November 27, 2024, and letters went out dated January 6, 2025 — the copy filed with the Vermont Attorney General is here. The settlement lists the data involved as names, medical histories and treatment information, patient account numbers, physician and prescription information, billing and claims data, health insurance information, Social Security numbers, credit card information and financial account information.
The breach was reported to the HHS Office for Civil Rights as affecting 136,724 people; the lawsuit put the figure at 148,515. Massachusetts alone received notice for 22,514 residents. The Hunters International ransomware group claimed the attack; NRHN has not confirmed that claim.
The 2026 claim. On September 29, 2026, the Brain Cipher ransomware group publicly claimed an attack on Northeast Rehab and threatened to publish stolen data. That is the attackers’ claim. As of October 18, 2026 we found no notice from NRHN and no attorney general filing about a 2026 incident, so what data was involved — if any — and how many people are affected has not been published.
Case details
2024 breach — settled in state court. The first suit, Minicucci v. Northeast Rehabilitation Hospital Network, was filed January 10, 2025 in the U.S. District Court for the District of New Hampshire, No. 1:25-cv-00024. Four class complaints were then consolidated as Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897, in the Superior Court of Rockingham County, New Hampshire. That is the case that settled. The court granted preliminary approval on November 19, 2025 and set the final approval hearing for March 2, 2026. NRHN denies wrongdoing.
New federal suits — 2026. Court records show six proposed class actions against the network in the U.S. District Court for the District of New Hampshire: Bedard (No. 1:26-cv-00795), Daniels (No. 1:26-cv-00796), Everett (No. 1:26-cv-00797), Goodwin (No. 1:26-cv-00799), Rudolph (No. 1:26-cv-00813) and Mosher (No. 1:26-cv-00817). Motions to consolidate were filed October 9, 2026, and on October 14, 2026 the court entered consolidation orders and an order on appointing counsel in Bedard. The docket entries we could read do not say which incident these suits concern.
Status: One Settlement Closed, New Federal Cases Open
2026 federal cases — early stage. The six suits are being consolidated. There is no settlement, no fund, no administrator, no claim form and no deadline in those cases.
Follow this case
There's no claim deadline yet. We'll email you if a settlement opens a claim period.
Who Is Covered
2024 settlement: the class is “All individuals residing in the United States whose Private Information was or may have been compromised, impacted, or affected in connection with the Data Incident discovered by NRHN in May 2024.” If you got a letter dated January 6, 2025, you were most likely in the class. Unless you opted out by February 17, 2026, you are bound by the settlement whether or not you filed a claim.
2026 claim: nobody has been officially notified, because NRHN has not published a notice. If a breach is confirmed, affected patients and staff should get a letter from NRHN. Keep it.
What the Settlement Pays — and What the New Cases Pay
The 2026 federal cases have produced nothing payable: no settlement, no fund, no claim form. To get a sense of what similar breach settlements pay, see our data breach settlement calculator.
Northeast Rehab Data Breach Timeline
May 13–22, 2024 — The First Breach
An unauthorized person accesses NRHN systems and views or copies files. NRHN detects suspicious activity on May 22.
January 6, 2025 — Notice Letters
NRHN mails notices and offers 24 months of Experian credit monitoring. The breach is reported to HHS as affecting 136,724 people.
January 10, 2025 — First Lawsuit
Minicucci is filed in federal court in New Hampshire. Four complaints are later consolidated in Rockingham County Superior Court, No. 218-2025-CV-00897.
November 19, 2025 — Preliminary Approval
The court preliminarily approves the settlement: up to $5,000 for documented losses or a $75 flat payment, with a $500,000 cap.
February 17 and March 2, 2026 — Deadline and Hearing
Claims, opt-outs and objections close February 17. The final approval hearing is set for March 2, 2026.
September 29 – October 14, 2026 — New Claim, New Suits
Brain Cipher claims an attack on September 29. Six federal class actions against NRHN in New Hampshire are consolidated starting October 14, 2026.
Three Things to Watch For
A closed settlement next to a new, unconfirmed incident is an easy setup for confusion — and for fraud:
“Late claim” or “reopened claim” offers for the 2024 settlement
The claim deadline was February 17, 2026. Anyone offering to file a Northeast Rehab claim for you now, especially for a fee or your Social Security number, is not working for the court. The administrator’s official number is (833) 417-4993.
Messages that say your data was “leaked” in 2026
NRHN has not confirmed the September 2026 incident or said whose data was involved. A call, text or email claiming to know your data is on the dark web and asking you to pay for protection or to “verify” your identity is a scam pattern, not a notice.
“Sign up to get paid” for the 2026 lawsuits
The new federal cases have no settlement and no claim form. Ads that ask you to register for a payout are lawyer intake forms at best. You never have to pay to be part of a class action.
Northeast Rehab Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Northeast Rehabilitation Hospital Network data breach lawsuit?
Yes, more than one. The 2024 breach led to Minicucci, et al. v. Northeast Rehabilitation Hospital Network, No. 218-2025-CV-00897 in Rockingham County Superior Court, which settled. In 2026, six more proposed class actions were filed in federal court in New Hampshire, starting with Bedard, No. 1:26-cv-00795. On October 14, 2026 the court began consolidating them.
Can I still file a claim in the Northeast Rehab settlement?
No. The deadline was February 17, 2026, for online claims and for mailed claims, which had to be postmarked by that date. If you filed in time, payment comes only after final approval and after any appeals are resolved.
What is the typical payout per person for a data breach settlement?
In this settlement, a flat claim was $75, and documented losses could be reimbursed up to $5,000. All payments together are capped at $500,000, so if claims exceed the cap, every payment shrinks pro rata. Other settlements use different formulas. Our payout calculator shows how the numbers usually work.
Can you sue a hospital for a data breach?
Yes. Patients sued NRHN over the 2024 breach, alleging it failed to protect their information, and the case settled without NRHN admitting wrongdoing. Our page on hospital cyberattack lawsuits covers other cases.
Was Northeast Rehab hacked again in 2026?
A ransomware group called Brain Cipher claimed an attack on September 29, 2026. As of October 18, 2026, we found no confirmation from NRHN and no state attorney general filing, so whether data was taken has not been established.
How many people were affected by the 2024 breach?
The breach was reported to the HHS Office for Civil Rights as 136,724 people. The lawsuit cited 148,515. Massachusetts received notice for 22,514 residents.
Is there a class action lawsuit against Change Healthcare for its data breach?
That is a different breach, at a different company. This page does not cover it. See our Change Healthcare data breach page.
What should I do right now?
If you filed a 2024 claim, keep your confirmation and watch for payment from the settlement administrator, not from anyone who contacts you out of the blue. Whichever incident concerns you, freeze your credit at all three bureaus and check your health insurer’s explanation-of-benefits statements for care you never received.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Open Class Action SettlementsSettlements still taking claims, with deadlines
- Data Breach Settlement CalculatorEstimate what a breach settlement claim may pay
- Hospital Cyberattack LawsuitsOther patient data breach cases against hospitals
- Wayne Memorial Hospital SettlementAnother hospital data breach settlement