$1.5M Northeast Rehab Hospital Data Breach Settlement

Claims are closed. The February 17, 2026 deadline has passed.

View Open Settlements
Medical Data Breach · Claims Closed

$1.5M Northeast Rehabilitation Hospital Data Breach Settlement

Published February 12, 2026
Updated July 25, 2026

This $1.5 million settlement covered people whose information was affected by Northeast Rehabilitation Hospital Network’s May 2024 cyberattack. Claims for $75 cash or up to $5,000 in documented losses closed February 17, 2026.

Northeast Rehabilitation Hospital data breach settlement

Current Status

Claims are closed. The deadline was February 17, 2026, and the final approval hearing was scheduled for March 2, 2026. The official settlement website does not currently post a final approval order or payment date.

What Is Northeast Rehabilitation Hospital Network?

Northeast Rehabilitation Hospital Network (NRHN) is a healthcare provider based in New Hampshire that specializes in physical rehabilitation and recovery services. If you or a family member has gone through rehab after a stroke, a major surgery, a spinal cord injury, a traumatic brain injury, or a serious accident, there's a chance you were treated at one of NRHN's facilities.

The network operates rehabilitation hospitals and outpatient clinics across New Hampshire and surrounding areas. Their patients are often people going through some of the most difficult and vulnerable periods of their lives — recovering from life-changing injuries and conditions that require weeks or months of intensive treatment. During that process, the hospital collects an enormous amount of personal, medical, and financial information.

What Happened?

In May 2024, NRHN's computer systems were hit by a targeted cyberattack. Hackers gained access to files containing deeply sensitive patient information, including:

• Names
• Medical histories and treatment information
• Patient account numbers
• Physician information
• Prescription details
• Medical billing and claims information
• Health insurance information
• Social Security numbers
• Credit card information
• Financial account information

That's essentially everything — your complete medical profile combined with your complete financial identity. A class action lawsuit was filed, and a settlement has now been reached. NRHN denies wrongdoing and the court has not made any determination of liability. The case is Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897, in the Superior Court of Rockingham County, New Hampshire.

StatusClaims ClosedPayment date not announced.
Claim DeadlineFebruary 17, 2026The filing window has passed.
Settlement Value$1.5 MillionIncluding payments and security upgrades.
Potential BenefitUp to $5,000Or a $75 cash option.

Why a Rehabilitation Hospital Breach Is Especially Concerning

A data breach at any hospital is serious, but a rehabilitation hospital holds a particular kind of information that makes this breach especially troubling.

Rehab patients aren't just visiting for a routine checkup. They're typically undergoing extended treatment for serious conditions — stroke recovery, brain injuries, spinal cord damage, post-surgical rehabilitation, orthopedic injuries. Their files contain detailed treatment notes, progress assessments, physician evaluations, prescription regimens, and information about the specific nature and severity of their conditions.

This kind of detailed medical information, combined with Social Security numbers and financial data, creates a uniquely dangerous package for identity thieves. Criminals can use it for medical identity theft (filing false insurance claims under your name), financial identity theft (opening accounts or filing fraudulent tax returns), or even targeted scams that reference your specific medical situation to make fraudulent communications seem legitimate.

And unlike a stolen credit card number, you can't cancel your medical history. Once that information is in the hands of criminals, the risk is permanent.

Who Qualifies?

You are a class member if you are a U.S. resident whose private information was or may have been compromised in connection with the data incident discovered by NRHN in May 2024. If you received a notification letter from Northeast Rehabilitation Hospital Network about the breach, you are likely eligible.

How Much Can I Get?

You must choose one of two options:

Option A: Up to $5,000 for Documented Losses

Option A offered reimbursement of up to $5,000 for documented out-of-pocket expenses, including:

• Losses from identity theft or fraud
• Fees for credit reports, credit monitoring, or freezing/unfreezing credit
• Costs to replace IDs
• Postage to contact banks by mail
• Other out-of-pocket expenses related to the breach

All expenses must have occurred between May 22, 2024 and February 17, 2026. You'll need to provide documentation like bank statements or receipts. Self-prepared notes can support your claim but aren't sufficient on their own.

Option B: $75 Cash Payment (No Proof Needed)

Option B offered a flat $75 cash payment without documentation.

All payments under Options A and B were subject to an aggregate $500,000 cap and could be reduced proportionally if approved claims exceeded that amount.

What Else Does the Settlement Include?

Beyond the cash payments to class members, NRHN has agreed to spend at least an additional $500,000 to upgrade its computer systems and internal security protocols. This is meant to prevent future breaches and protect patient data going forward. Combined with the $500,000 payment fund and $500,000 in attorneys' fees, the total settlement value is $1.5 million.

How Claims Were Filed

During the claim period, class members could submit a claim online at NortheastRehabHospitalDataSettlement.com
or mail a downloaded claim form to the Settlement Administrator.

The February 17, 2026 deadline has passed.

What Happens If I Do Nothing?

Class members who did not submit a claim by the deadline will not receive a settlement payment. Their released claims are governed by the settlement terms.

Important Dates


Cyberattack: May 2024
Eligible Expense Period: May 22, 2024 – February 17, 2026
Claim Form Deadline: February 17, 2026
Opt-Out Deadline: February 17, 2026
Objection Deadline: February 17, 2026
Final Approval Hearing: March 2, 2026 at 9:00 AM ET — Superior Court of Rockingham County, Brentwood, NH

Attorneys' Fees and Service Awards

Class Counsel (Kopelowitz Ostrow P.A., Shamis & Gentile P.A., Edelson Lechtzin LLP, and Strauss Borrelli PLLC) may receive $500,000 in attorneys' fees and costs, paid by NRHN separately from the class member payment fund. The four class representatives may each receive $2,500 in service awards, also paid separately. These fees do not reduce the $500,000 available for class member payments.



Case Information

The case is Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897, in the Superior Court of Rockingham County, New Hampshire.

Class Counsel: Jeff Ostrow of Kopelowitz Ostrow P.A.; Leanna A. Loginov of Shamis & Gentile P.A.; Marc H. Edelson of Edelson Lechtzin LLP; and Raina Borrelli of Strauss Borrelli PLLC.

Settlement Notice

Your browser does not support viewing PDFs inline. Download the PDF.



Sources

• Class Action Settlement Notice, Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897 (Superior Court of Rockingham County, NH)
• Settlement Website: NortheastRehabHospitalDataSettlement.com

For more class actions keep scrolling below.
Settlement Value $1.5 million
Case Title Minicucci, et al. v. Northeast Rehabilitation Hospital Network
Case Number 218-2025-CV-00897
Court Superior Court of Rockingham County, New Hampshire
Claim Deadline February 17, 2026 (passed)
Status Claims closed — payment date not announced

Open Data Breach Settlements to Check Instead