Legacy Professionals, LLP

Legacy Professionals LLP, a full-service accounting firm, experienced an unauthorized access incident between April 25 and April 30, 2024. The firm learned of suspicious activity in late April 2024. An investigation, assisted by a third-party cybersecurity specialist, determined that certain files were taken from Legacy servers by an unauthorized actor. The investigation confirmed in early February 2025 that the affected information may have included names and social security numbers. The firm terminated unauthorized access, reported the incident to federal law enforcement, implemented stricter access controls, and offered 24 months of credit monitoring and identity theft protection to affected individuals.