New Hampshire Housing Data Breach

New Hampshire Housing is a state housing finance authority that administers the Housing Choice Voucher program, connecting landlords and tenants across New Hampshire. The agency recently notified the state Attorney General of a security incident involving a landlord’s account within its Yardi RentCafe software portal.

Organizations that administer housing assistance programs handle sensitive banking and personal information for both landlords and tenants, and have a responsibility to protect that information and respond promptly when unauthorized access occurs.

New Hampshire Housing’s Data Breach Investigation

According to a notification letter filed with the New Hampshire Attorney General’s Office, a landlord participating in New Hampshire Housing’s Housing Choice Voucher program notified the agency that their private email account had been breached by an unauthorized third party. The unauthorized party then used the compromised email to log into the landlord’s portal within New Hampshire Housing’s Yardi RentCafe software. Once inside the portal, the unauthorized user changed the landlord’s banking information, resulting in the misappropriation of $848 in HUD subsidy funds.

New Hampshire Housing stated that the incident was confined to the landlord’s personal email account and was not the result of a breach of New Hampshire Housing’s own systems or a broader vulnerability in the Yardi RentCafe software itself. The agency also notified the U.S. Department of Housing and Urban Development of the incident.

Portal-based property management software often stores a mix of tenant personal information and landlord banking details in one place, which is a common target for account-takeover schemes when an individual user’s own email or credentials are compromised outside the platform itself. Incidents that begin with a single compromised email account, rather than a breach of the platform provider’s core systems, are an increasingly common pattern as attackers look for the easiest point of entry into otherwise well-secured systems. Housing authorities and similar organizations that rely on third-party portals for landlord and tenant management are encouraged to implement additional verification steps for any changes made to banking or payment information, precisely the kind of safeguard New Hampshire Housing indicated it is now reviewing.

When Did This Breach Occur?

New Hampshire Housing identified the incident after being notified by the affected landlord and reported it to the New Hampshire Attorney General’s Office on July 30, 2026, with the compromise itself having occurred around July 2, 2026.

What Information Was Breached?

New Hampshire Housing stated that the affected landlord’s portal, Yardi’s RentCafe, includes tenants’ names and addresses, a ledger of payments, and landlord banking information such as bank name, routing number, account number, and account type. The landlord’s own profile also included the landlord’s name, mailing address, phone numbers, email address, and Tax ID number, which may be either an Employer Identification Number or a Social Security number. New Hampshire Housing stated this information, for the specific landlord involved, would have been available to the unauthorized user.

What You Can Do

Individuals connected to this incident, including tenants and landlords participating in the Housing Choice Voucher program, should take steps to protect themselves, including:

• Reviewing bank and payment account statements for unauthorized transactions
• Enabling multi-factor authentication on any personal email or portal accounts
• Monitoring credit reports for signs of fraud, available for free at annualcreditreport.com
• Reporting any suspicious activity to New Hampshire Housing and relevant financial institutions
• Remaining alert to phishing attempts referencing housing assistance programs

File a Data Breach Lawsuit Against New Hampshire Housing

If you were affected by this security incident involving New Hampshire Housing’s landlord portal, you may be entitled to compensation. Affected individuals may be able to pursue legal action to recover damages related to the exposure of their personal and financial information.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.