Think Big Health Care Solutions Data Breach Letter: What Happened and Your Legal Options
Got a data breach letter from Think Big Health Care Solutions?
Dapeer Law, P.A. is investigating a potential class action against Think Big Health Care Solutions, a Wellington, Florida health care consulting and practice management business, on behalf of individuals whose personal information may have been accessed in a 2025 cybersecurity incident involving an employee's Microsoft account and work laptop.
Latest on the Think Big Health Care Solutions data breach
- : Dapeer Law opened its investigation following notice filings posted by the Massachusetts and New Hampshire Attorneys General.
Who qualifies for the Think Big Health Care Solutions data breach investigation
You may be eligible to participate in a class action if any of the following applies:
- You received a data breach notification letter from Think Big Health Care Solutions dated October 2026.
- Your letter offered free single-bureau credit monitoring through Cyberscout. The New Hampshire sample letter offers 12 months and the Massachusetts sample letter offers 24 months.
- Think Big Health Care Solutions may have received your information because you or your information is associated with a medical practice it provided services to, such as Optimotion Orthopaedics.
- No proof of harm required to consult with counsel. You do not need to have already suffered identity theft to explore your legal options.
- Excluded: individuals who did not receive a breach notice and whose information was not involved in the incident.
Not sure if you qualify?
Send us your notice, we'll confirm your eligibility at no cost.
What happened in the Think Big Health Care Solutions data breach
On June 20, 2025, Think Big Health Care Solutions, a Wellington, Florida health care consulting and practice management business, discovered suspicious activity involving an employee's Microsoft account and work laptop. According to its notice letter, a forensic investigation that concluded on July 22, 2025 determined that an unauthorized individual remotely accessed the employee's laptop and Microsoft account, and that certain files and emails may have been accessed between May 30, 2025 and June 20, 2025. The company says the unauthorized access was limited to that one employee's laptop and account.
Think Big provides services to medical practices, including patient billing, contracting and credentialing, and says it may have received individuals' information because they or their information are associated with a practice it provided services to. Its cover letter to the New Hampshire Attorney General says it posted substitute notice of the incident on its website on July 18, 2025 and published a media release in the Sun Sentinel. The notice letter says Think Big finalized the list of individuals to notify on September 10, 2026, while the New Hampshire cover letter gives September 29, 2026. The individual notice letters are dated October 9, 2026, more than fifteen months after the suspicious activity was discovered, and offer free single-bureau credit monitoring through Cyberscout: 12 months in the New Hampshire sample letter and 24 months in the Massachusetts sample letter.
The notice letter says the information related to the recipient that was present in the impacted files and emails was name, claims information, medical record number and procedure codes. The Massachusetts filing lists name, claims information, financial account information, medical record number, medical information and procedure codes. The New Hampshire filing lists name, claims information, medical record number and procedure codes, and the New Hampshire cover letter says the information that may have been compromised includes name, claims information, procedure codes, medical record number, and/or health insurance policy number, and that it varies by individual.
Why Think Big Health Care Solutions had your information
Think Big Health Care Solutions provides services to medical practices including patient billing, contracting and credentialing.
In the sample letter, Think Big writes that it "may have received some of your personal information because you or your information is associated with Optimotion Orthopaedics, which Think Big has provided services to."
Your letter still qualifies for a free review.
What to do if you got a Think Big Health Care Solutions data breach letter
Keep your notice letter
Do not discard it. Your letter contains the enrollment code for credit monitoring and is important evidence if you decide to participate in a lawsuit.
Enroll in the free Cyberscout credit monitoring
Enroll using the Cyberscout instructions and code in your letter within 90 days from the date of the letter. The sample letters offer 12 months (New Hampshire) or 24 months (Massachusetts) of single-bureau monitoring. Accepting this benefit does not waive your right to pursue legal action.
Place a fraud alert or credit freeze
Contact Equifax, Experian, and TransUnion to place a fraud alert or freeze on your file. Request a free weekly credit report from AnnualCreditReport.com, and use the FTC's IdentityTheft.gov recovery guide.
Speak with a data breach attorney
Consultations with Dapeer Law are free and confidential. We'll review your notice, explain your options, and advise whether you may be eligible to join a class action.
Submit your notice for a free review
Two minutes online. A licensed attorney reviews every submission.
Think Big Health Care Solutions breach timeline
Compensation you may be entitled to
Out-of-pocket expenses
Credit freezes, identity restoration services, and other costs incurred responding to the breach.
Time spent monitoring
Hours spent reviewing accounts, disputing fraudulent charges, and dealing with identity theft issues.
Identity theft & fraud losses
Unreimbursed funds stolen from accounts, unauthorized credit lines, or tax refund fraud tied to the breach.
Statutory damages
Certain state data breach and consumer protection statutes provide for fixed damages regardless of actual loss.
Injunctive relief
Court orders requiring Think Big Health Care Solutions to implement stronger data security practices for the information it handles while providing patient billing, contracting and credentialing services to medical practices.
Compensation categories depend on applicable state law, the types of data exposed, and documented losses. No recovery is guaranteed.
Think Big Health Care Solutions data breach FAQ
I received a data breach letter from Think Big Health Care Solutions. What should I do? +
Keep the letter, enroll in the free Cyberscout credit monitoring within 90 days from the date printed on your letter, review your account statements, place a fraud alert or credit freeze on your credit file, and contact a data breach attorney for a free consultation. Accepting credit monitoring does not waive your right to sue.
Is the Think Big Health Care Solutions data breach letter real or a scam? +
Think Big Health Care Solutions has reported this incident to the Massachusetts and New Hampshire Attorneys General. Compare your letter to the official filing linked in Sources below, and use only the enrollment website and phone number printed in your letter. Be cautious of unexpected calls, texts or emails about the breach that ask for your Social Security number or account login. If you are unsure, send your letter to Dapeer Law for a free review.
Why did I get a Think Big Health Care Solutions letter if I never used Think Big Health Care Solutions? +
Think Big Health Care Solutions is a health care consulting and practice management business that provides services to medical practices, including patient billing, contracting and credentialing. The sample letter says Think Big may have received your personal information because you or your information is associated with a practice it provided services to; the posted sample names Optimotion Orthopaedics. Think Big says it identified the companies the affected individuals were associated with, notified them, and offered to send notice on their behalf. The New Hampshire filing lists Optimotion Orthopaedics, Pinnacle Health Specialists, LLC and Trustbridge, INC as data owners. Your letter should name the organization connected to you.
Am I eligible to join a class action against Think Big Health Care Solutions? +
If you received an October 2026 breach notice from Think Big Health Care Solutions, you are likely eligible for a free case evaluation. Eligibility depends on your state of residence, the categories of your data that were involved, and any losses you have suffered. Dapeer Law will review your notice at no cost.
How much money could I receive from a class action lawsuit? +
Data breach class action recoveries vary significantly. Settlements typically range from a few hundred dollars for basic out-of-pocket losses to several thousand dollars for documented identity theft, with class size, damages, and negotiation all affecting the final amount. No payout is guaranteed, and this investigation has not yet resulted in a settlement.
What personal information was exposed in the breach? +
The notice letter says the information present in the impacted files and emails was name, claims information, medical record number and procedure codes. The Massachusetts filing lists name, claims information, financial account information, medical record number, medical information and procedure codes. The New Hampshire filing lists name, claims information, medical record number and procedure codes, and the New Hampshire cover letter adds health insurance policy number and says the information varies by individual. Your individual letter should list the information involved for you.
Did Think Big Health Care Solutions offer free credit monitoring? +
Yes. The sample letters offer Single Bureau Credit Monitoring, Single Bureau Credit Report and Single Bureau Credit Score services at no charge, plus proactive fraud assistance, through Cyberscout, a TransUnion company. The New Hampshire sample letter offers twelve months and the Massachusetts sample letter offers twenty-four months. You must enroll within 90 days from the date of your letter. Enrollment does not waive your right to pursue a claim.
How many people were affected by the Think Big Health Care Solutions breach? +
Think Big Health Care Solutions has not disclosed a total number of affected individuals. The Massachusetts filing reports 87 Massachusetts residents, the New Hampshire filing reports 17 New Hampshire residents, and the notice letter says the incident involves 14 individuals in Rhode Island. These are partial, state-level counts. This page will be updated as more information becomes available.
Is there a deadline to take legal action? +
Yes. Statutes of limitations for data breach claims vary by state and legal theory, typically ranging from one to six years. Waiting can permanently bar your claim. Contact us as soon as possible for a free evaluation.
How do I get a copy of the official breach notice? +
A sample of the notice letter is posted with Think Big's filings with the New Hampshire Attorney General and in Massachusetts (linked in Sources below). If you received a letter but no longer have it, Dapeer Law can assist you in obtaining a copy during your free consultation.
Sources & references
- Official breach notice filing · New Hampshire Attorney General, Think Big Health Care Solutions breach notice
- Secondary regulator report · Massachusetts Attorney General, breach notice filing (Think Big Health Care Solutions, reported Oct 9, 2026)
- Credit bureau freezes · Equifax · Experian · TransUnion
- Free weekly credit reports · AnnualCreditReport.com
- Identity theft recovery guide · FTC IdentityTheft.gov
Don't let the deadline decide for you. Submit your claim today.
You only have a limited window to act. Our team will review your notice, explain your options, and tell you whether you may be eligible to recover compensation, at no cost to you.
