Infinite Services Data Breach Lawsuit Investigation
Were you recently alerted that Infinite Services lost control of your personal or medical data? More than 31,000 people just found out their Social Security numbers and health records may be in criminal hands. Learn how to protect yourself and see if you can file a claim.
What Happened?
On May 5, 2025, Brooklyn-based Infinite Services Inc. — a provider of in-home and school-based therapy services — experienced a network shutdown when employees could not log in. A ransom note file extension, linked to a known threat-actor, appeared on one server. The company:
- Immediately powered down its entire network, halting further encryption.
- Engaged a third-party digital forensics firm and notified the FBI.
- Confirmed on June 23, 2025 that one or more servers containing sensitive data had been accessed.
Scope of the Breach
Regulatory filings show that 31,742 patients, employees, and former staff nationwide were impacted, including:
- 25 residents in Massachusetts
- 8 residents in New Hampshire
Notification letters were mailed on July 25, 2025, and required disclosures were filed with state attorneys general and the U.S. Department of Health & Human Services (HHS).
What Information Was Exposed?
The compromised server contained both Personally Identifiable Information (PII) and Protected Health Information (PHI), including:
- Full names and addresses
- Social Security numbers
- Dates of birth
- Government-issued IDs (e.g., driver’s license numbers)
- Health insurance details and member IDs
- Medical records and treatment information
- Financial account, credit, and debit card numbers
Your Immediate Action Plan
- Enroll in the free IDX services. Infinite Services is offering 12–24 months of credit monitoring, CyberScan, and up to $1 million in identity-theft insurance.
- Monitor financial and medical statements. Look for unfamiliar charges or Explanation of Benefits (EOB) you don’t recognize.
- Place a fraud alert or credit freeze. Contact any major credit bureau to make it harder for identity thieves to open new accounts.
- File your claim. If negligence contributed to this breach, you could be eligible for compensation for out-of-pocket losses, time, and emotional distress.
Why Legal Action Matters
Healthcare providers must comply with HIPAA and state privacy statutes. When companies fail to safeguard data, courts have awarded victims reimbursement for:
- Credit-monitoring and identity-theft-protection expenses
- Unauthorized charges or medical fraud
- Time spent freezing credit and resolving issues
- Emotional distress caused by data exposure
If you received a notice from Infinite Services, you have the right to explore a lawsuit or settlement. Acting early strengthens your legal position and helps prevent further misuse of your information.
Frequently Asked Questions
How do I know if I’m part of the Infinite Services data breach?
You will receive — or may already have received — a written notification dated July 25, 2025. The letter includes instructions for free IDX enrollment and outlines what data was compromised.
What should I do first after the Infinite Services breach?
Enroll in the complimentary identity-protection services, then review recent statements from banks, credit cards, and health insurers. Set up alerts for new account openings.
Is Infinite Services offering free credit monitoring?
Yes. Impacted individuals receive 12 to 24 months of credit and dark-web monitoring, CyberScan alerts, and $1 million in identity theft insurance through IDX.
Can I sue Infinite Services for the data breach?
Potentially. Data-breach litigation can recover money for unreimbursed expenses, lost time, and emotional distress. Eligibility depends on factors such as the type of data exposed and any financial harm you experience.
Does the Infinite Services data breach affect my medical care?
Your medical treatment should not be interrupted, but stolen PHI can be used to commit medical identity theft. Monitor Explanation of Benefits (EOB) statements and contact your insurer if you spot unfamiliar services.
How long do I have to take legal action against Infinite Services?
Statutes of limitation vary by state, typically ranging from one to four years for privacy claims. Consult a qualified attorney promptly to preserve your rights.