Legacy 5 Corporate Services LLC discovered a significant data breach affecting the personal information of employees, former employees, job applicants and dependents. Legacy 5 provides professional services in accounting, human resources and information technology to multiple companies.
On Sept. 15, 2025, Legacy 5 discovered that an archival storage hard drive on its network had been encrypted by a cybercriminal. An investigation determined that the cyberattack compromised sensitive personally identifiable information (PII) belonging to at least 1,777 individuals.
Exposed information included names, addresses, dates of birth, Social Security numbers and financial account information used for direct deposits and payroll. The compromised files included employment and compliance records related to hiring, onboarding, payroll, tax reporting and benefits administration.
Individuals involved with the following companies were impacted by the data breach:
The incident was also disclosed to the Maine Attorney General's office on Oct. 9, 2025. The company notified affected consumers in writing on Oct. 10, 2025.
Legacy 5 Corporate Services responded to the breach by securing its network and coordinating with law enforcement and cybersecurity experts. The company is also issuing required state and federal disclosures.
If you receive a notice, or believe your personal information may have been compromised in this breach: