Legacy Professionals - Notice of Data Privacy Event
Westchester, Illinois - February 28, 2025 - Today, Legacy Professionals LLP ("Legacy") issued notice of a recent data security event that may impact the confidentiality of information related to certain individuals that Legacy handles in relation to the provision of accounting services performed for individuals, corporations, not-for-profit organizations, labor unions and their related employee benefit plans. This event affected Legacy systems and did not impact any of our clients' systems.
In late April 2024, Legacy became aware of potentially suspicious activity affecting data stored on our computer network. Legacy immediately took steps to secure our environment and launched an investigation to confirm the full nature and scope of the activity with the assistance of industry-leading cybersecurity specialists. At that time, Legacy was advised that the investigation identified no evidence of data taken from Legacy systems. After receiving additional information in November 2024, the investigation determined that certain files had been taken from Legacy servers by an unauthorized actor. Therefore, Legacy conducted a comprehensive and time-intensive review of the involved files, with the assistance of data review specialists, to identify what information was impacted and the individuals to whom the information relates. Now that the investigation is complete, Legacy is contacting all potentially impacted individuals.
In early February 2025, the investigation and data review identified the following types of information were present in the impacted data set: names and contact information, social security number, tax identification number, driver's license/state ID number, passport number, financial account information, payment card information, medical treatment information, and health insurance information. The impacted information varies by individual.
Legacy is notifying potentially affected individuals via this notice and a posting on its website at https://www.legacycpas.com/security-notice. Legacy takes this event and the security of information in its care very seriously. Legacy will also provide notice by mailing letters to potentially affected individuals. Legacy is notifying appropriate governmental regulators, including the U.S. Department of Health and Human Services. Further, Legacy also notified law enforcement including the FBI of the incident.
Individuals seeking additional information regarding this event may contact Legacy using a dedicated toll-free assistance line that has been established at 877-441-7153. You may also write to Legacy by email at notification@legacycpas.com or by mail at P.O. Box 7008, Westchester, IL 60154.
Individuals can also find additional information on how they can help protect their personal information as well as obtain additional resources via the posting available on Legacy's website at: https://www.legacycpas.com/security-notice. As a precautionary measure, Legacy encourages potentially affected individuals to remain vigilant against incidents of identity theft by reviewing account statements, explanations of benefits, and credit reports for unusual activity and reporting any suspicious activity promptly to their insurance company, health care provider, or financial institution.
Media Contact: Kevin Farrell/(267) 930-4691
/PRNewswire -- Feb. 28, 2025/
SOURCE Legacy Professionals LLP