New Horizons Data Breach Lawsuit Investigation
Was your Social Security number among the 455 GB of data stolen from New Horizons? A January ransomware attack has put 9,476 people at risk of identity theft. Find out how to protect yourself and whether you can pursue compensation below.
What Happened?
On January 11, 2025, NHB Holdings, LLC—parent of New Horizons Baking Company, Genesis Baking Company, Metraco Transportation, and New Horizons Food Solutions—detected suspicious activity on its network. A forensic investigation later confirmed that an unauthorized actor accessed and exfiltrated files between January 6 and 10, 2025.
The Cactus ransomware group quickly claimed responsibility, boasting on February 20, 2025, that it had stolen 455 GB of corporate and personal data.
What Information Was Exposed?
Based on company notifications and state filings, the following categories of personally identifiable information (PII) were involved:
- Full names
- Social Security numbers
- Potentially dates of birth, addresses, government ID numbers, medical and financial details (per ransomware leak)
Even a single compromised Social Security number can enable tax fraud, new-account scams, and other forms of identity theft—so immediate action is critical.
Who Is Affected?
New Horizons disclosed the breach to 9,476 U.S. residents, including:
- 1 Maine resident
- 60 Massachusetts residents
- Thousands of current and former employees in other states
Written notification letters began mailing on August 28, 2025.
Company Response
After containing the intrusion, New Horizons:
- Hired external cybersecurity experts to investigate and remediate systems
- Notified federal law-enforcement agencies
- Implemented additional security controls and employee training
- Offered complimentary Cyberscout (TransUnion) credit-monitoring—12 months for Maine residents and 24 months for Massachusetts residents
Your Action Checklist
Take these steps today to reduce your risk:
- Enroll in the free credit-monitoring service provided in your notice letter.
- Place a fraud alert or security freeze with Equifax, Experian, and TransUnion.
- Review all bank, credit-card, and insurance statements for suspicious transactions.
- Order your free annual credit reports and dispute unfamiliar entries.
- Report suspected identity theft to the FTC and local law enforcement.
Can You File a Lawsuit?
Companies are legally required to safeguard the personal data they collect. When they fail, victims may be entitled to compensation for:
- Time spent remedying fraud or identity theft
- Out-of-pocket expenses (credit freezes, notary fees, postage, etc.)
- Future credit-monitoring or identity-theft-protection costs
- Emotional distress
If you received a New Horizons breach notice, you can explore your legal options. Complete the secure form on this page to see if you qualify to join a data-breach lawsuit investigation.
Frequently Asked Questions
What exactly happened in the New Horizons data breach?
An unauthorized party infiltrated New Horizons’ network between January 6 and 10, 2025, stealing sensitive files later linked to the Cactus ransomware gang.
What personal data was compromised in the New Horizons breach?
Confirmed data includes names and Social Security numbers. The ransomware group also claims to have addresses, government IDs, medical, financial, and HR records.
Is New Horizons offering free credit monitoring after the breach?
Yes. Impacted individuals receive no-cost Cyberscout (TransUnion) credit-monitoring—12 or 24 months, depending on state law.
Can I sue New Horizons for the data breach?
Possibly. Victims may recover damages for identity-theft costs, lost time, and emotional distress. Submit your information to learn if you’re eligible.
How do I protect my Social Security number after the New Horizons data breach?
Activate the offered credit-monitoring, place a fraud alert, freeze your credit reports, and closely monitor all financial accounts for unauthorized activity.
Attorney Advertising. Prior results do not guarantee a similar outcome.