Legacy Professionals, LLP Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Legacy Professionals, LLP data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Legacy Professionals, LLP
Legacy Professionals LLP is a certified public accounting firm established in 2003, headquartered in Westchester, Illinois, with additional offices in Schererville, Indiana, and Edina, Minnesota. The firm provides specialized audit, accounting, tax, and related services to niche industries that are often overlooked by larger firms.
The company specializes in serving employee benefit plans, labor organizations, not-for-profit organizations, government entities, and small to medium-sized businesses.
What was the April 2024 Ransomware Attack?
In late April 2024, Legacy Professionals LLP discovered suspicious activity on their computer network. By November 2024, their investigation revealed that certain files had been taken by an unauthorized actor. The breach affected Legacy's systems, not those of their clients.
Information Exposed:
- Name of individual
- Social Security Number
- Driver’s License number
- Government-issued ID number (e.g., passport, state ID card)
- Financial Information (e.g., account number, credit or debit card number)
- Medical Information
- Health Insurance Information
On August 25, 2024, the ransomware group, LOCKBIT 3.0, took credit for the attack with a post on the dark web. The group threatened to make the data public if their demands were not met within 14 days.
An investigation by Claim Depot was unable to determine if the files were made public or if the ransom was paid by Legacy Professionals.

The breach was reported to various attorney generals' offices, with disclosures made to the California, Maine, Massachusetts, and Texas offices in early 2025. The firm notified affected individuals via U.S. Mail on February 27, 2025.
Your Rights and Next Steps
If you received a notification letter, it is crucial to take steps to protect your personal information. Legacy Professionals LLP is offering 24 months of free credit monitoring and identity theft protection services through IDX. You should enroll in these services as soon as possible.
Additionally, you should remain vigilant by regularly reviewing your account statements and credit reports for any suspicious activity. Consider placing a fraud alert or credit freeze on your credit file to prevent unauthorized access.
You May Be Entitled to Compensation
If your information was compromised in this data breach, you might be entitled to compensation for any damages incurred. Lawyers are ready to help you explore your legal options and determine if you qualify for a class action lawsuit.
Complete the form below to join the lawsuit and protect your rights.