Normandin, Cheney, & O’Neil Data Breach Investigation
Normandin, Cheney & O’Neil PLLC was listed in a Vermont Attorney General security breach filing, but detailed public notice information is limited. The filing indicates certain personal information may have been involved, including Social Security numbers, financial account numbers, and health records. If you received a notice or believe your information may be affected, it is important to review your accounts and monitor for misuse. You can also fill out the form on this page to contact Strauss Borrelli PLLC and learn whether you may qualify for a claim.
Normandin, Cheney & O’Neil PLLC is a New Hampshire law firm that provides legal services. Public regulatory information shows the firm’s name was listed in a Vermont security breach notice category, which may be relevant to clients, employees, or others whose information it maintained.
Key Facts at a Glance
- Entity named in filing: Normandin, Cheney & O’Neil PLLC
- Industry: Legal services
- Location: New Hampshire
- Public listing date: June 12, 2026, according to a Vermont Attorney General security breach listing
- Reported affected population: 14 Vermont residents
- Information reportedly involved: Social Security numbers, financial account numbers, and health records
- What is still unclear: The public filing data provided here does not identify the incident date, discovery date, or fuller circumstances of the event
What Happened?
According to a Vermont Attorney General security breach filing, a reported security incident associated with Normandin, Cheney & O’Neil PLLC was publicly listed on June 12, 2026. Detailed information from the official notice is not publicly accessible at this time, so the summary here is based on the regulatory listing rather than a full public notice.
That matters because some key facts people usually want to know, such as when the incident occurred, when it was discovered, how access may have happened, and whether a third party was involved, are not available in the structured public information provided here. If you received a mailed notice, email, or other communication, that document may contain more specific details about what the company reported.
What Information Was Exposed?
The Vermont filing identifies several categories of personal information that may have been involved: Social Security numbers, financial account numbers, and health records. Because the publicly accessible details are limited, it is best to read those data points as the types of information reported to regulators, not as a statement that every affected person had every category involved.
These are sensitive data types. Social Security numbers can increase identity theft risk, financial account information can raise concerns about fraud or unauthorized transactions, and health record information can create privacy concerns beyond ordinary contact-data exposure. If you were notified, review the notice carefully to see which categories the company says may apply to you.
What Should You Do Next?
- Save any notice you received. Keep the letter, envelope, email, and any offer of credit monitoring or identity protection. These documents may help you understand what was reported and when.
- Watch your financial accounts and credit. Review bank, card, and loan activity for anything unfamiliar, and consider obtaining your free credit reports. If Social Security numbers or account numbers may have been involved, a fraud alert or credit freeze may also be worth considering.
- Pay attention to medical and insurance activity. If health information may have been involved, review explanation-of-benefits statements and provider communications for services or claims you do not recognize.
- Report suspicious activity quickly. If you spot identity theft or fraud, report it to the relevant financial institution and use the FTC’s identity-theft recovery resources as soon as possible.
- Ask questions and get legal guidance if needed. If you received a notice and want to understand your options, you can fill out the form on this page to contact Strauss Borrelli PLLC for a free review of whether the reported incident may support a claim.
Your Legal Rights
If your personal information was involved in a reported data incident, you may have legal rights depending on the facts, the content of any notice you received, and the laws of your state. In data-incident matters, those issues can include whether reasonable safeguards were used, whether notice was provided as required, and whether affected individuals were offered appropriate protective services.
A lawyer can also help assess whether you may have claims related to time spent responding to the incident, out-of-pocket losses, or the risk of future misuse of sensitive information. Because the public filing here is limited, any legal evaluation should be based on the actual notice and your specific circumstances rather than assumptions.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC represents individuals in data-breach and privacy matters and understands how to evaluate incident notices, sensitive-data exposure, and the practical harm people face after a reported security event. Our team focuses on clear communication, careful factual review, and helping clients understand whether they may have viable claims.
If you received a notice tied to this matter or are concerned your information may have been involved, Strauss Borrelli PLLC can review what is publicly known and the documents you received. To learn more, use the form provided on this page to request a confidential case review.
If you received a breach notification letter from Normandin, Cheney & O'Neil:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.










