Seasons Living, a senior living operator based in Lake Oswego, Oregon, has experienced a data breach. The incident was discovered on March 4, 2025. A cybercriminal known as "f1y" alleged that they leaked data from Seasons Living.
The hacked data included personal information related to vendors, rental applicants and tenants, current and former employees, and owners. Exposed information may include names, addresses, contact information, dates of birth, Social Security numbers, driver's license or state ID numbers, health insurance information, medical records and financial information.
Seasons Living published a notice of cybersecurity incident on its website on Aug. 6, 2025. The data breach was disclosed to the Massachusetts Attorney General's office on Aug. 8, 2025.
The total number of impacted individuals has not been released but is believed to be in the thousands. Seasons Living is working to notify all impacted individuals by mail.
In addition to required state and federal disclosures, Seasons Living is offering 12 months of free credit monitoring to affected individuals.
If you receive a data breach notice from Seasons Living, you may want to:
For more information about the company, visit the Seasons Living website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.