NH · AG Filing: May 11, 2026
No cost. No obligation. If your data was exposed by New Congol LLC dba New Congoleum, you may be entitled to financial compensation.
Start Free Review →Based on the data types reported in this filing:
Your SSN is the master key to your identity. Once exposed, criminals can open new lines of credit, take out loans, or file taxes in your name.
Combined with a name and other leaked data, date of birth helps criminals pass identity verification questions at banks and government agencies.
Phone numbers exposed in breaches are used for SIM swapping attacks — hijacking your number to bypass two-factor authentication on financial accounts.
New Congol LLC dba New Congoleum was the subject of a data breach notification filed with the NH Attorney General. The AG filing was recorded on May 11, 2026.
From the AG filing description
New Congol LLC, doing business as New Congoleum, operates within the manufacturing and building products sector, specializing in the production and distribution of resilient flooring materials such as sheet vinyl, luxury vinyl tile, and related commercial and residential surfacing solutions. As an established enterprise managing extensive supply chains, distribution networks, and a large manufacturing workforce, the company routinely collects, processes, and stores vast quantities of confidential records. This data landscape encompasses comprehensive employee personnel files, payroll and compensation records, tax documentation, and sensitive proprietary operational files necessary for maintaining a nationwide commercial footprint. In 2026, New Congol LLC dba New Congoleum formally reported a significant data security incident to the New Hampshire Attorney General's Office. While specific forensic details surrounding the origin of the intrusion continue to emerge, incidents affecting manufacturing and industrial entities typically involve sophisticated cyberattacks such as ransomware deployments, unauthorized entry into internal corporate networks, or third-party vendor compromises. Because modern manufacturing operations rely heavily on interconnected enterprise resource planning (ERP) systems, inventory databases, and centralized HR management platforms, a breach of this nature often exposes extensive administrative networks where deep reserves of sensitive corporate and personnel information are stored. The exposure resulting from the New Congoleum security incident implicates several categories of highly sensitive personal data, each carrying distinct and severe risks for affected individuals. Compromised employee and contractor records frequently include Full Names, Social Security Numbers, Dates of Birth, banking details utilized for direct deposit, and wage and tax return information. The unauthorized disclosure of Social Security Numbers and financial credentials creates an immediate and long-term risk of identity theft, fraudulent credit applications, and unauthorized tax filings. Furthermore, the compromise of banking and wage data exposes victims to direct financial fraud, unauthorized account takeovers, and targeted phishing schemes designed to exploit the compromised employment relationship. Under federal and state legal standards, including applicable state data protection laws and the general common-law duty of care, New Congol LLC dba New Congoleum had an affirmative legal obligation to implement and maintain reasonable and appropriate security measures to safeguard the private information entrusted to its care. Enterprises holding sensitive personally identifiable information (PII) must deploy robust administrative, physical, and technical safeguards—such as multi-factor authentication, network segmentation, regular vulnerability assessments, and robust data encryption. The occurrence of a widespread data breach strongly suggests a potential failure to uphold these critical security standards, raising serious questions regarding the adequacy of the company's protective protocols and its compliance with prevailing data privacy regulations. For individuals who have received an official data breach notification letter from New Congol LLC dba New Congoleum, this correspondence serves as a formal legal acknowledgment that your personal information was compromised due to inadequate corporate security. Legally, receiving this notice establishes your standing to participate in a class action lawsuit aimed at holding the company accountable for its security failures. Affected individuals are entitled to seek legal remedies for the distress, time lost, and heightened lifelong risk of identity theft, without needing to prove that financial loss has already occurred. Our law firm is currently investigating potential claims on a contingency fee basis, meaning there are never any out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.
You may have been affected by the New Congol LLC dba New Congoleum data breach if:
Common categories of compensation in data breach class actions
The hours spent responding to a data breach — canceling accounts, contacting credit bureaus, updating passwords, and investigating fraud — represent compensable economic harm in data breach litigation.
Once your SSN is exposed, protection becomes an ongoing expense. Plaintiffs in data breach settlements have recovered costs for credit freezes, identity protection subscriptions, and time spent dealing with fraudulent accounts — sometimes covering multiple years of exposure.
Fees charged to close and reopen accounts, issue replacement cards, or dispute fraudulent transactions are recoverable in data breach litigation. So are the costs of overdrafts, late payments, and credit damage caused by unauthorized activity.
Data breach victims regularly report anxiety, loss of sleep, and ongoing fear of identity theft. These non-economic harms are cognizable injuries in data breach litigation, particularly in cases involving SSN or medical record exposure.
Note: an attorney general breach filing does not by itself establish a settlement fund, a payment amount, or a claim deadline. If an official settlement notice is later issued, rely on that notice for payment details and deadlines.
Applicable State Law
This breach was reported under the New Hampshire data breach notification law, which mandates notification and establishes your right to seek damages.
No. Under New Hampshire data breach notification law and federal law, the unauthorized exposure of your personal data — regardless of whether it has been actively misused — can be sufficient grounds for a claim. The breach itself is the injury.
Nothing. The Law Office of David S. Harris handles data breach cases on contingency — you pay zero upfront and owe nothing unless compensation is recovered.
Immediately place a free credit freeze at all three bureaus (Equifax, Experian, TransUnion). A freeze blocks new accounts from being opened in your name. Then file a complaint with the FTC at IdentityTheft.gov and contact our office — SSN exposure is one of the most serious breach types.
Banks may reverse fraudulent charges, but they are not obligated to compensate you for time lost, stress, or indirect damages. A class action claim against the breached company can recover those additional categories of harm.
State statutes of limitations for data breach claims typically run 2–4 years from the date of the breach or its discovery. Because this breach was recently disclosed, the window is open — but acting early preserves your options and strengthens the case.
Accepting free credit monitoring from New Congol LLC dba New Congoleum does not waive your right to pursue legal action unless you signed a specific release waiving claims. In most cases, victims who accepted monitoring can still file.
Not necessarily. Many data breach victims are never notified directly. If your personal information was held by New Congol LLC dba New Congoleum during the relevant period, you may still qualify even without receiving a letter. A free eligibility review can confirm your status.
Learn how to participate in the class action and what compensation you may be entitled to.
Join the Class Action →Use our verification tool to confirm your letter matches this official AG filing.
Verify My Notice LetterThis case file references a public filing made with the state filing in NH. This website is not affiliated with, endorsed by, or operated by any state government agency.
New Congol LLC dba New Congoleum breach?
Free case review · No fee unless you win