Lamont, Hanley & Associates (LHA) suffered a data breach on June 20, 2023, when an unauthorized party accessed an employee’s email account through a phishing attack.
Between 11,484 and 22,000 individuals had their names, Social Security numbers, and dates of birth exposed. LHA did not notify affected individuals until May 2, 2024, approximately ten months after discovering the breach.
A class action was filed by Federman & Sherwood in August 2024 over LHA’s alleged failure to implement adequate security measures. If you received a breach notification from LHA, monitor your credit and financial accounts closely for signs of identity theft.
This guide covers who LHA is, the breach, their documented complaint patterns, and how to respond.
Who Is Lamont, Hanley & Associates?
Lamont, Hanley & Associates, Inc. (LHA) is a third-party debt collection agency founded in 1991 in Manchester, New Hampshire. The company collects for healthcare providers, utilities, government agencies, financial services companies, and insurance companies on a national basis.
LHA is not BBB-accredited and has accumulated 16 BBB complaints in the past three years and 5 CFPB complaints. They have been named in federal court cases for alleged illegal communication tactics.
Not sure where to start with your credit?
Answer a few simple questions and get a free step-by-step plan to rebuild your credit.
The 2023 Data Breach and Ten-Month Notification Delay
On June 20, 2023, an unauthorized party accessed an LHA employee’s email account through a phishing attack. LHA secured the account and launched an investigation but did not notify affected consumers until May 2, 2024, nearly ten months later.
Between 11,484 and 22,000 individuals had their names, Social Security numbers, and dates of birth exposed. Federman & Sherwood filed a class action in August 2024 alleging LHA failed to implement adequate security measures.
If you received a breach notification from LHA, place a credit freeze with all three bureaus and file an identity theft report with the FTC before engaging on any collection matter.
Sending Collection Letters While Payments Are Being Made
A documented BBB complaint describes a consumer making automatic monthly payments to the original creditor. Despite active payments, LHA continued sending two letter types simultaneously: a reminder to pay and a broken promise letter. The original creditor told the consumer LHA would stop, but the letters continued.
LHA’s own BBB response confirmed both letter types were being sent and explained their purpose without resolving the consumer’s complaint. If you are making payments to the original creditor and LHA continues contacting you, send proof of payments to LHA by certified mail with a written cease-contact request.
Illegal Communication Tactics
A documented federal court case alleges LHA used illegal and harassing communication tactics to coerce payment. Documented consumer complaints also describe LHA calling family members and neighbors about consumer debts. Contacting third parties and disclosing debt information is a specific FDCPA violation.
If LHA has contacted anyone other than you about your debt, document the contact and file a CFPB complaint immediately.
What LHA Cannot Do Under Federal Law
The FDCPA applies to Lamont, Hanley & Associates. Under federal law, they cannot:
- Continue sending collection letters to consumers making payments to the original creditor: A documented BBB complaint.
- Use illegal or harassing communication tactics: Subject of a documented federal court case.
- Contact family members or neighbors and disclose debt information: A documented consumer complaint pattern.
- Attempt to collect debts consumers do not owe: A documented FDCPA complaint category.
- Call outside permitted hours: Contact is only allowed between 8 a.m. and 9 p.m. in your time zone.
File complaints at consumerfinance.gov and with the New Hampshire Attorney General’s Consumer Protection Bureau.
Medical Debt Reporting Rules Apply
Because LHA collects heavily for healthcare providers, specific credit reporting protections apply. Medical debts under $500 are not reported, paid medical collections are removed, and unpaid medical debt has a one-year waiting period before reporting.
If your account falls under any of these categories, dispute it immediately.
Verify Before Paying Anything
Send a written debt validation request by certified mail within 30 days of first contact. Ask for the original creditor, the account number, the balance at referral, and an itemized breakdown of all charges.
If you are already making payments to the original creditor, include proof of those payments in your correspondence to LHA and request they cease contact given the active payment arrangement.
How to Check Your Credit Report for LHA Errors
Pull your credit reports from all three bureaus at AnnualCreditReport.com. Is the original creditor identified? Is the balance accurate? Was the account reported before the one-year medical debt waiting period?
If you received a breach notification and see unfamiliar accounts on your credit report, dispute them as potential identity theft with each bureau simultaneously.
How Long Can LHA Legally Pursue the Debt?
New Hampshire has a 3-year statute of limitations on most consumer debts, one of the shortest in the country. The relevant state is typically where you currently reside.
Your Options for Resolving an LHA Account
Once you have verified the debt:
- If making payments to the original creditor: Send proof to LHA by certified mail and request they cease contact.
- If a breach notification was received: Place a credit freeze, file an FTC identity theft report, and monitor accounts for new unauthorized activity.
- Dispute if inaccurate: If the debt is not yours, was already paid, or medical debt reporting rules apply, dispute with all three bureaus.
- Check New Hampshire’s 3-year limit: Given the short statute, older LHA accounts may be time-barred.
Ready to take action on your credit?
Get your personalized plan in 30 seconds. Free, no credit check.
How to Contact Lamont, Hanley & Associates
Handle all communication in writing:
- Address: Lamont, Hanley & Associates, Inc., 1138 Elm Street, Manchester, NH 03101
- Phone: (800) 639-2204
Bottom Line
Lamont, Hanley & Associates suffered a 2023 data breach affecting up to 22,000 individuals and waited ten months to notify victims. If you received a breach notification, prioritize identity protection steps before addressing any collection account.
New Hampshire’s 3-year statute of limitations is among the shortest in the country. Check the original delinquency date before engaging on any LHA account.
Brooke Banks is a personal finance writer specializing in credit, debt, and smart money management. She helps readers understand their rights, build better credit, and make confident financial decisions with clear, practical advice.