What is the Northeast Rehabilitation Hospital Network data breach settlement?

A $1.5 million class action settlement resolving claims related to a targeted cyberattack on Northeast Rehabilitation Hospital Network's computer systems in May 2024. The attack compromised patient files containing medical records, Social Security numbers, credit card information, and other sensitive personal data. The case is Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897 in the Superior Court of Rockingham County, New Hampshire.

How much can I get from the NRHN settlement?

You have two options. Option A lets you claim up to $5,000 for documented out-of-pocket losses from the data breach, such as identity theft costs, credit monitoring fees, and expenses related to replacing IDs. Option B is a flat $75 cash payment that requires no documentation at all. You must choose one or the other. All payments are subject to a $500,000 aggregate cap and may be reduced pro rata if total claims exceed that amount.

What is the deadline to file a claim?

The deadline to submit a claim form is February 17, 2026. You can file online at www.NortheastRehabHospitalDataSettlement.com or by mail to the Settlement Administrator at P.O. Box 25226, Santa Ana, CA 92799.

What information was exposed in the NRHN data breach?

The cyberattack may have exposed names, medical histories and treatment information, patient account numbers, physician information, prescription information, medical billing and claims information, health insurance information, Social Security numbers, credit card information, financial account information, and other sensitive data.

Do I need documentation to file a claim?

It depends on which option you choose. Option B (the $75 flat payment) requires no documentation at all. Option A (up to $5,000 for documented losses) requires proof like bank statements, receipts, or records showing expenses you incurred because of the data breach. Self-prepared notes can support but cannot substitute for third-party documentation.

What expenses qualify for the $5,000 reimbursement?

Qualifying expenses include losses from identity theft or fraud, fees for credit reports, credit monitoring services, or freezing and unfreezing your credit, costs to replace IDs, and postage to contact banks by mail. All expenses must have occurred between May 22, 2024 and February 17, 2026.

What happens if I do nothing about the NRHN settlement?

If you do nothing, you will not receive any cash payment from the settlement. You will remain a class member and your legal claims against NRHN will be released, meaning you give up the right to sue them over this data breach.

Is NRHN improving its security as part of the settlement?

Yes. In addition to the $500,000 available for class member payments, NRHN has agreed to spend at least an additional $500,000 to enhance its computer systems and internal security protocols. This is on top of the cash payments to class members.

When is the final approval hearing for the NRHN settlement?

The final approval hearing is scheduled for March 2, 2026 at 9:00 AM Eastern Time in Courtroom 6 of the Superior Court of Rockingham County, New Hampshire, at 10 Route 125, Brentwood, NH 03833.

How are the attorneys being paid in the NRHN settlement?

Class Counsel may receive $500,000 in attorneys' fees and costs, paid by NRHN separately from the class member payment fund. The four class representatives may each receive $2,500 in service awards, also paid by NRHN. These fees do not reduce the $500,000 available for class member payments.

Why is a rehabilitation hospital data breach especially concerning?

Rehabilitation hospitals collect deeply personal medical information that goes beyond basic health records. Patient files contain detailed information about the conditions being treated — stroke recovery, spinal cord injuries, traumatic brain injuries, post-surgical rehabilitation — along with treatment progress notes, prescription details, and physician assessments. Combined with Social Security numbers and financial information, this data creates a comprehensive profile that can be exploited for medical identity theft, insurance fraud, and targeted scams.

$1.5M Northeast Rehab Hospital Data Breach Settlement

Q: Who qualifies for the NRHN data breach settlement?

All individuals residing in the United States whose private information was or may have been compromised, impacted, or affected in connection with the data incident discovered by NRHN in May 2024. If you received a notification letter from Northeast Rehabilitation Hospital Network about the breach, you are likely a class member.

By Steve Levine

Northeast Rehabilitation Hospital Network Data Breach Class Action Settlement

Published: February 12, 2026

Claim Form Deadline: February 17, 2026

Cash Payment: $75 (no proof needed) or up to $5,000 (documented losses)

Total Settlement Value: $1,500,000

If you've ever been a patient at Northeast Rehabilitation Hospital Network, your medical records, Social Security number, and financial information may have been stolen in a cyberattack — and a class action settlement is now paying affected patients $75 with no documentation required, or up to $5,000 if you can show you suffered losses because of the breach.

What Is Northeast Rehabilitation Hospital Network?

Northeast Rehabilitation Hospital Network (NRHN) is a healthcare provider based in New Hampshire that specializes in physical rehabilitation and recovery services. If you or a family member has gone through rehab after a stroke, a major surgery, a spinal cord injury, a traumatic brain injury, or a serious accident, there's a chance you were treated at one of NRHN's facilities.

The network operates rehabilitation hospitals and outpatient clinics across New Hampshire and surrounding areas. Their patients are often people going through some of the most difficult and vulnerable periods of their lives — recovering from life-changing injuries and conditions that require weeks or months of intensive treatment. During that process, the hospital collects an enormous amount of personal, medical, and financial information.

What Happened?

In May 2024, NRHN's computer systems were hit by a targeted cyberattack. Hackers gained access to files containing deeply sensitive patient information, including:

• Names
• Medical histories and treatment information
• Patient account numbers
• Physician information
• Prescription details
• Medical billing and claims information
• Health insurance information
• Social Security numbers
• Credit card information
• Financial account information

That's essentially everything — your complete medical profile combined with your complete financial identity. A class action lawsuit was filed, and a settlement has now been reached. NRHN denies wrongdoing and the court has not made any determination of liability. The case is Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897, in the Superior Court of Rockingham County, New Hampshire.

Why a Rehabilitation Hospital Breach Is Especially Concerning

A data breach at any hospital is serious, but a rehabilitation hospital holds a particular kind of information that makes this breach especially troubling.

Rehab patients aren't just visiting for a routine checkup. They're typically undergoing extended treatment for serious conditions — stroke recovery, brain injuries, spinal cord damage, post-surgical rehabilitation, orthopedic injuries. Their files contain detailed treatment notes, progress assessments, physician evaluations, prescription regimens, and information about the specific nature and severity of their conditions.

This kind of detailed medical information, combined with Social Security numbers and financial data, creates a uniquely dangerous package for identity thieves. Criminals can use it for medical identity theft (filing false insurance claims under your name), financial identity theft (opening accounts or filing fraudulent tax returns), or even targeted scams that reference your specific medical situation to make fraudulent communications seem legitimate.

And unlike a stolen credit card number, you can't cancel your medical history. Once that information is in the hands of criminals, the risk is permanent.

Who Qualifies?

You are a class member if you are a U.S. resident whose private information was or may have been compromised in connection with the data incident discovered by NRHN in May 2024. If you received a notification letter from Northeast Rehabilitation Hospital Network about the breach, you are likely eligible.

How Much Can I Get?

You must choose one of two options:

Option A: Up to $5,000 for Documented Losses

If you incurred out-of-pocket expenses because of the data breach, you can claim reimbursement up to $5,000. Qualifying expenses include:

• Losses from identity theft or fraud
• Fees for credit reports, credit monitoring, or freezing/unfreezing credit
• Costs to replace IDs
• Postage to contact banks by mail
• Other out-of-pocket expenses related to the breach

All expenses must have occurred between May 22, 2024 and February 17, 2026. You'll need to provide documentation like bank statements or receipts. Self-prepared notes can support your claim but aren't sufficient on their own.

Option B: $75 Cash Payment (No Proof Needed)

If you don't have documented losses — or just don't want to deal with gathering paperwork — you can claim a flat $75 cash payment with zero documentation required. Just submit the claim form and select Option B. That's it.

All payments (both Option A and Option B) are subject to an aggregate cap of $500,000. If total claims exceed that amount, payments will be reduced proportionally. So the sooner you file, the better your chances of receiving the full amount.

File Your Claim Now

What Else Does the Settlement Include?

Beyond the cash payments to class members, NRHN has agreed to spend at least an additional $500,000 to upgrade its computer systems and internal security protocols. This is meant to prevent future breaches and protect patient data going forward. Combined with the $500,000 payment fund and $500,000 in attorneys' fees, the total settlement value is $1.5 million.

How Do I File a Claim?

• Online: Submit your claim at NortheastRehabHospitalDataSettlement.com
• By mail: Send your completed claim form to: NRHN Data Incident Settlement, c/o Settlement Administrator, P.O. Box 25226, Santa Ana, CA 92799

Deadline: February 17, 2026 (submitted online or postmarked by mail).

What Happens If I Do Nothing?

If you do nothing, you will not receive any cash payment — no $75, no reimbursement, nothing. Your legal claims against NRHN will be released, meaning you give up the right to sue them over this data breach. Since the $75 payment requires zero documentation, there's no reason not to file.

Important Dates

• Cyberattack: May 2024
• Eligible Expense Period: May 22, 2024 – February 17, 2026
• Claim Form Deadline: February 17, 2026
• Opt-Out Deadline: February 17, 2026
• Objection Deadline: February 17, 2026
• Final Approval Hearing: March 2, 2026 at 9:00 AM ET — Superior Court of Rockingham County, Brentwood, NH

Attorneys' Fees and Service Awards

Class Counsel (Kopelowitz Ostrow P.A., Shamis & Gentile P.A., Edelson Lechtzin LLP, and Strauss Borrelli PLLC) may receive $500,000 in attorneys' fees and costs, paid by NRHN separately from the class member payment fund. The four class representatives (Diane Minicucci, Ellen Lavoie, Adam Bagni, and Frank Ciaravolo) may each receive $2,500 in service awards, also paid separately. These fees do not reduce the $500,000 available for class member payments.

File Your Claim Before Feb 17

How Do I Find Class Action Settlements?

Find all the latest class actions you can qualify for by getting notified of new lawsuits as soon as they are open to claims:

Case Information

The case is Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897, in the Superior Court of Rockingham County, New Hampshire.

Class Counsel: Jeff Ostrow of Kopelowitz Ostrow P.A.; Leanna A. Loginov of Shamis & Gentile P.A.; Marc H. Edelson of Edelson Lechtzin LLP; and Raina Borrelli of Strauss Borrelli PLLC.

Class Representatives: Diane Minicucci, Ellen Lavoie, Adam Bagni, and Frank Ciaravolo.

Settlement Administrator: P.O. Box 25226, Santa Ana, CA 92799.

Settlement Notice

Sources

• Class Action Settlement Notice, Minicucci, et al. v. Northeast Rehabilitation Hospital Network, Case No. 218-2025-CV-00897 (Superior Court of Rockingham County, NH)
• Settlement Website: NortheastRehabHospitalDataSettlement.com

Filing Class Action Settlement Claims

Please submit only truthful and accurate claims. Submitting false information can result in denial of benefits and potential penalties. If you are unsure whether you qualify, review the official notice or contact Class Counsel. OpenClassActions.com is a consumer news site and is not the settlement administrator or a law firm.

For more class actions keep scrolling below.

Open Class Action Lawsuit and Class Action Settlement

$25 Amazon Gift Card

Enter Here

Video Game Addicts Lawsuit

Deadline: Pending

Submit Claim

DraftKings & FanDuel Addiction Lawsuits

Status: Open

Submit Claim

Children playing Roblox and using Discord?

Pre-Qualify Here

Submit Claim

RoundUp Cancer Lawsuits: How to Qualify

Status: Open to Claims

Submit Claim

$5.5M Mid America Pet Food Settlement

Deadline: February 5, 2026

Submit Claim

File a rebate form to get a coupon, refund, rebate, or payment from this class action settlement

$4.17M RevitaLash Conditioner Settlement

Deadline: April 20, 2026

Submit Claim

$87.5M Beef Prices Settlement

Deadline: June 30, 2026

Submit Claim

Dollar General Bait & Switch Settlement

Deadline: April 13, 2026

Submit Claim

Class Action Summary
Status	Proposed Settlement — Awaiting Final Approval
Claim Deadline	February 17, 2026
Total Settlement Value	$1,500,000
Class Payment Fund	$500,000 (aggregate cap)
Option A	Up to $5,000 for documented losses
Option B	$75 flat payment (no documentation)
Security Improvements	$500,000 minimum for system upgrades
Category	Data Breach / Cyberattack / Healthcare / Medical Records
Defendant	Northeast Rehabilitation Hospital Network
Cyberattack Date	May 2024
Case Number	218-2025-CV-00897
Court	Superior Court of Rockingham County, New Hampshire
Final Approval Hearing	March 2, 2026 at 9:00 AM ET — Brentwood, NH
Attorneys' Fees	$500,000 — paid by NRHN separately from fund
Claim Website	Northeast Rehab Hospital Data Settlement