Legend Senior Living Data Breach

The investigation found that an unauthorized person accessed certain systems between July 27 and August 15, 2025, and may have viewed or copied particular files on those systems. The company secured its systems and conducted a detailed review of the affected files. The preliminary review was completed on March 12, 2026, and affected people were notified on April 10, 2026.

The information varied by person. State notices and notification summaries identify names, addresses, Social Security numbers, driver's license numbers, government identification such as passports, financial-account information, medical information, and health-insurance information. They do not indicate that every information type applied to every person.

The company assessed the security of its systems, investigated the scope of the incident, and reconciled file and address records to identify affected people. It said federal law enforcement and relevant regulators were notified, security policies were being reviewed, and affected people were offered complimentary credit monitoring and identity-theft protection.

Notice recipients should check their letters for the enrollment terms of the complimentary protection service and review bank accounts, credit reports, health-insurance statements, and medical bills for unfamiliar activity. People whose Social Security numbers or financial information were involved may consider a fraud alert or credit freeze based on their circumstances and should independently verify unexpected care or payment requests.