Reported to the NH Attorney General on January 16, 2025.
NH residents may qualify for compensation. Free attorney review — no obligation, no upfront cost.
Check My Rights →Craft Beer Company GP was the subject of a data breach notification filed with the NH Attorney General. The AG filing was recorded on January 16, 2025.
Craft Beer Company GP operates within the craft beverage and hospitality sector, functioning not only as a producer and distributor of specialty beers and ales, but also as a complex commercial enterprise managing direct-to-consumer e-commerce sales, extensive club memberships, and wholesale distribution networks. Because modern craft breweries rely heavily on digital platforms for online merchandise sales, subscription-based mug clubs, event ticketing, and direct-to-door shipping, they routinely collect and store a vast repository of sensitive consumer information. Beyond customer data, the company maintains robust human resources operations, managing sensitive employment records, payroll details, and tax documentation for brewmasters, production staff, sales representatives, and administrative personnel. In 2025, Craft Beer Company GP formally reported a data security incident to the New Hampshire Attorney General, alerting consumers and employees to an unauthorized compromise of its network infrastructure. In the context of modern food and beverage enterprises, security incidents typically involve sophisticated cyberattacks such as targeted ransomware deployments, unauthorized intrusions into e-commerce payment portals, or vulnerabilities within third-party logistics and point-of-sale software vendors. These vectors often allow malicious threat actors to dwell undetected within corporate networks, systematically harvesting sensitive customer profiles, financial transaction logs, and internal corporate records before exfiltrating the data to external servers. The exposure resulting from this breach compromises several categories of sensitive personal information, each carrying distinct and severe risks for the affected individuals. Exposed data fields frequently include full legal names, physical mailing addresses, email addresses, phone numbers, and encrypted or poorly secured payment card details, alongside internally held corporate credentials. When consumer financial and purchase history data is compromised, victims face an elevated risk of targeted phishing attacks, unauthorized credit card charges, and fraudulent e-commerce account takeovers. Furthermore, where employee records were accessed, the exposure of Social Security numbers, dates of birth, and banking details lays the groundwork for devastating identity theft, tax fraud, and unauthorized loans opened in the victims' names. Under both New Hampshire state consumer protection statutes and the broader mandates of the Federal Trade Commission Act, commercial entities like Craft Beer Company GP have a strict legal duty to implement and maintain reasonable security measures to safeguard the personal and financial information entrusted to them. This obligation encompasses deploying robust network encryption, conducting regular vulnerability assessments, monitoring system access logs, and ensuring that third-party vendors adhere to strict cybersecurity standards. The occurrence of a data breach of this nature strongly suggests a failure in these foundational security protocols, raising serious questions about whether the company neglected industry-standard safeguards required to protect consumer and employee privacy. Receiving a data breach notification letter from Craft Beer Company GP serves as formal legal acknowledgment that your personal data was compromised due to corporate inadequate security measures. Under established legal precedents, the receipt of this notice establishes the concrete legal standing necessary to participate in a class action lawsuit aimed at holding the company accountable. Affected individuals are not required to prove that financial fraud has already occurred to seek legal redress; the mere exposure and increased risk of future identity theft are actionable injuries. Our firm investigates these data security failures on a strict contingency fee basis, meaning affected individuals pay zero upfront costs and owe no legal fees unless we successfully recover compensation on your behalf.
Based on the data types reported in this filing, affected individuals face the following specific risks:
Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.
Phone numbers exposed in breaches are used for SIM swapping attacks — hijacking your number to bypass two-factor authentication on financial accounts.
Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.
Under the New Hampshire data breach notification law, you may have a legal claim against Craft Beer Company GP if any of the following apply:
Applicable law: This breach was reported under the New Hampshire data breach notification law, which establishes your right to seek damages from Craft Beer Company GP.
The hours spent responding to a data breach — canceling accounts, contacting credit bureaus, updating passwords, and investigating fraud — represent compensable economic harm in data breach litigation.
Once your SSN is exposed, protection becomes an ongoing expense. Plaintiffs in data breach settlements have recovered costs for credit freezes, identity protection subscriptions, and time spent dealing with fraudulent accounts — sometimes covering multiple years of exposure.
When login credentials are exposed, the costs of downstream account compromises — password managers, security audits, and recovery costs for hijacked downstream accounts — can be recovered. Courts in recent class actions have awarded damages for credential exposure even without proven misuse.
Data breach victims regularly report anxiety, loss of sleep, and ongoing fear of identity theft. These non-economic harms are cognizable injuries in data breach litigation, particularly in cases involving SSN or medical record exposure.
Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.
No. Under New Hampshire data breach notification law and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.
Statutes of limitations for data breach claims vary by state but typically run 2–4 years. Depending on when you learned of the breach, you may still have time. Contact our office for a free eligibility review — there is no cost to find out.
Accepting free credit monitoring from Craft Beer Company GP does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
Not necessarily. Many data breach victims are never notified directly. If your personal information was held by Craft Beer Company GP during the relevant period, you may still qualify even without receiving a letter. A free eligibility review can confirm your status.
Most data breach class actions resolve within 18 to 36 months, though timelines vary by court and complexity. Your participation requires minimal effort — typically completing a claim form. Our office handles all litigation; you are notified when a settlement is reached.
Received a notification letter from Craft Beer Company GP?
Read our dedicated guide — what the letter means and exactly what to do.
If you were affected by the Craft Beer Company GP data breach, you may be entitled to compensation. Submit your information below for a free attorney review — no obligation, no upfront cost.
Source: State Attorney General filing, NH
View Official AG Filing →Craft Beer Company GP breach?
Free case review · No fee unless you win