MalwareRansomwareData EncryptedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumActive
Legacy 5 Corporate Services, LLC
bd_3672ac509edbfe10 · schema v1 · pii pii-v1
Full breach record for Legacy 5 Corporate Services, LLC →Legacy 5 Corporate Services, LLC reported a ransomware incident discovered on September 15, 2025, where an external actor encrypted data on an archival storage hard drive. The incident impacted current and former employees, exposing PII including SSNs, DOBs, and financial account data. The company engaged forensic investigators and law enforcement; the investigation is ongoing.
Vermont clock⏱ VT AG >14 bday25 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_9a3a8f3530955d2aIndiana State AGfiled 2025-10-10Verified
- bd_a4ad8b8312413d64Maine State AGfiled 2025-10-09(1d gap)Candidate
- bd_dc03ddbe7c9be58fNew Hampshire State AGfiled 2025-10-14(4d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-10-10-legacy-5-corporate-services-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 10, 2025
- Raw hash
- 9ed0f69adf82ef262669d082fc2eeef4ddf50b7beeab46595b030b11caa6271d
Reporting entity
- Name
- Legacy 5 Corporate Services, LLCnorm: legacy 5 corporate
Victim entity
- Name
- Legacy 5 Corporate Services, LLCnorm: legacy 5 corporate
Incident
- Discovered
- Sep 15, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.