If you were affected, free legal review is available — no obligation.
Learn how to participate in the class action and what compensation you may be entitled to.
Join the Class Action →Use our verification tool to confirm your letter matches this official AG filing.
Verify My Notice LetterThis case file references a public filing made with the state filing in NH. This website is not affiliated with, endorsed by, or operated by any state government agency.
Catwig LLC dba Victory Disability was the subject of a data breach notification filed with the NH Attorney General. The AG filing was recorded on December 15, 2025.
From the AG filing description
Catwig LLC, doing business as Victory Disability, operates as a specialized advocacy and legal services firm dedicated to helping individuals navigate the complex process of applying for and securing Social Security Disability Insurance (SSDI) and Supplemental Security Income (SSI) benefits. Because of the core nature of its operations, Victory Disability routinely collects, processes, and stores an immense volume of deeply intimate and confidential information. Clients entrust the firm not only with standard contact details but also with comprehensive medical histories, detailed employment records, financial data, and sensitive government-issued identification numbers. This massive repository of data is essential for building compelling cases for disability claimants, making the organization a centralized hub of highly lucrative personal information. In 2025, Catwig LLC dba Victory Disability formally reported a data security incident to the New Hampshire Attorney General's office, alerting individuals and regulatory bodies that an unauthorized party had potentially accessed its network environment. While specific forensic details regarding the exact vector of the attack remain under investigation, breaches within advocacy and legal support sectors typically involve vulnerabilities such as unauthorized network intrusions, compromised employee credentials, or sophisticated third-party vendor exploits. Organizations holding vast archives of applicant records are prime targets for cybercriminals seeking to extract valuable personally identifiable information and protected health details for illicit monetization on the dark web. The exposure resulting from this incident encompasses a dangerous convergence of sensitive categories, including full legal names, Social Security numbers, dates of birth, detailed medical evaluations, and private financial records. The compromise of a Social Security number combined with medical history creates an acute and compounding risk of identity theft, medical fraud, and tax fraud. Unauthorized actors can exploit these credentials to fraudulently file for government benefits, open unauthorized financial accounts, or intercept medical treatments and insurance claims. Furthermore, because disability applicants are often in vulnerable financial positions, the downstream consequences of financial exploitation or compromised credit profiles can be particularly devastating and long-lasting. As an entity handling sensitive medical and financial data, Catwig LLC dba Victory Disability had a legal and ethical duty to implement robust administrative, physical, and technical safeguards to protect client records. Under state data protection statutes, common law negligence principles, and federal standards governing the protection of consumer privacy, organizations of this type are required to maintain encryption standards, conduct regular security audits, and deploy effective intrusion detection systems. The occurrence of a significant data breach strongly suggests potential failures in these foundational security protocols, raising serious questions about whether the company met its obligations to safeguard confidential consumer data against foreseeable cyber threats. Receiving a formal data breach notification letter from Catwig LLC dba Victory Disability serves as official legal confirmation that your confidential records were compromised as a result of corporate inadequate security practices. Under modern class action jurisprudence, the receipt of such a notification letter establishes legal standing to participate in a lawsuit, allowing affected individuals to seek accountability and compensation without needing to wait until actual financial fraud occurs. Our law firm is actively investigating potential class action claims on behalf of all impacted individuals. We handle these cases on a strict contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation for you.
Under the New Hampshire data breach notification law, you may have a legal claim against Catwig LLC dba Victory Disability if any of the following apply:
Based on the data types reported in this filing:
Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.
Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.
Common categories of compensation in data breach class actions
Courts recognize that the time spent monitoring accounts, placing credit freezes, and dealing with the aftermath of a breach has real economic value. This category of damages is recoverable even without direct financial loss.
Professional credit monitoring services cost $10–$40 per month. Identity theft restoration services, if needed, can cost hundreds of hours and thousands of dollars. Courts have awarded these costs as direct damages in SSN breach cases.
HIPAA violations carry civil penalties between $100 and $50,000 per violation. Where a healthcare organization's negligence led to the exposure of protected health information, class members may recover statutory damages in addition to actual losses.
Direct financial losses resulting from the breach — unauthorized charges, fraudulent transfers, or fees incurred through fraud — are recoverable as compensatory damages. Banks may reverse some charges; a class action recovers the remainder and associated costs.
Several state data breach laws provide for statutory minimum damages — fixed amounts recoverable per affected individual regardless of actual loss. These provisions exist specifically to make legal action viable for victims who have not yet experienced direct harm.
Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.
No. Under New Hampshire data breach notification law and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.
If Catwig LLC dba Victory Disability is a covered healthcare entity or business associate under HIPAA, affected patients have additional rights — including the right to an HHS complaint. These HIPAA violations also strengthen civil damages claims. Consult an attorney to understand your full remedies.
Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.
Statutes of limitations for data breach claims vary by state but typically run 2–4 years. Depending on when you learned of the breach, you may still have time. Contact our office for a free eligibility review — there is no cost to find out.
Accepting free credit monitoring from Catwig LLC dba Victory Disability does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
Applicable State Law
This breach was reported under the New Hampshire data breach notification law, which mandates notification and establishes your right to seek damages.
Catwig LLC dba Victory Disability breach?
Free case review · No fee unless you win