Legacy 5 Data Breach Impacts At Least 1,777 Employees and Applicants

Published
October 10, 2025
Updated
October 10, 2025
Legacy 5 Data Breach Impacts At Least 1,777 Employees and Applicants
Legacy 5
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Legacy 5

data breach?

Join the Lawsuit

It's free to join. 

Legacy 5 Corporate Services LLC discovered a significant data breach affecting the personal information of employees, former employees, job applicants and dependents. Legacy 5 provides professional services in accounting, human resources and information technology to multiple companies.

On Sept. 15, 2025, Legacy 5 discovered that an archival storage hard drive on its network had been encrypted by a cybercriminal. An investigation determined that the cyberattack compromised sensitive personally identifiable information (PII) belonging to at least 1,777 individuals.

Exposed information included names, addresses, dates of birth, Social Security numbers and financial account information used for direct deposits and payroll. The compromised files included employment and compliance records related to hiring, onboarding, payroll, tax reporting and benefits administration.

Individuals involved with the following companies were impacted by the data breach:

  • CESO, Inc.
  • DDC Management, LLC
  • TRG Advisors, LLC
  • Hartizen Homes, LLC
  • Legacy 5 Corporate Services, LLC
  • Matrix5, LLC
  • Threecore, LLC

The incident was also disclosed to the Maine Attorney General's office on Oct. 9, 2025. The company notified affected consumers in writing on Oct. 10, 2025.

Legacy 5 Corporate Services' response

Legacy 5 Corporate Services responded to the breach by securing its network and coordinating with law enforcement and cybersecurity experts. The company is also issuing required state and federal disclosures.

If you receive a notice, or believe your personal information may have been compromised in this breach:

  • Carefully review any notice or communication you receive from Legacy 5 or an employer impacted by the cybersecurity incident.
  • Monitor financial accounts and credit reports for signs of identity theft.
  • Consider placing fraud alerts or credit freezes with the major credit bureaus.
  • Be cautious of unsolicited emails or phone calls requesting personal information.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image