Legacy Professionals Data Breach Exposes PII & PHI

Legacy Professionals, LLP, a certified public accounting firm, recently experienced a significant data breach that has potentially impacted a large number of individuals. The breach was discovered on January 31, 2025, but the unauthorized access to the data occurred between April 25 and April 30, 2024. During this breach, an unauthorized actor accessed and extracted sensitive information from Legacy's servers.

A variety of personal information like social security numbers and medical information were exposed in the breach.

While the total number of affected individuals in the United States is not specified, specific numbers from certain states have been reported. In Texas, 4,939 individuals were affected, while Maine and Massachusetts reported 60 and 501 affected individuals, respectively.

The breach was disclosed to various state attorney generals, including Maine, Texas, Massachusetts, and California.

Legacy Professionals' Response

In response to the breach, Legacy Professionals, LLP took immediate action to secure their systems and engaged a third-party cybersecurity specialist to investigate the incident. The investigation revealed that certain files had been taken from their servers, leading to a comprehensive review to identify the impacted information and individuals.

Legacy has implemented more stringent access controls to prevent future incidents. They have also reported the breach to federal law enforcement. To support affected individuals, Legacy is offering 24 months of free credit monitoring and identity theft protection services through IDX. Affected individuals are encouraged to enroll in these services to safeguard their personal information.

Additionally, Legacy advises individuals to remain vigilant against identity theft by reviewing account statements and monitoring credit reports for suspicious activity. They have provided detailed steps on how to protect personal information, including placing fraud alerts or credit freezes with major credit reporting bureaus.