Legend Senior Living, LLC
bd_b7780c99023cd83c · schema v1 · pii pii-v1
Full breach record for Legend Senior Living, LLC →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Worldleaks on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
Legend Senior Living is an American-based, family-owned and operated company that provides quality elderly care across its facilities. They offer a variety of services from independent living, assisted living to memory care. Its mission is to serve seniors and their families by creating high-quality choices for senior living and foster an atmosphere of respect, dignity and personal engagement.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Jul 29, 2025
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- Indiana State AGbd_3b55cf33ba553be62026-04-10 · +255dCandidate
- Massachusetts State AGbd_7af9fee2266ba0552026-04-10 · +255dVerified by operator
- Maine State AGbd_82e727328d8924402026-04-10 · +255dVerified by operator
- Nebraska State AGbd_9051b99dcfe7d1642026-04-10 · +255dVerified
Show 3 more filings ↓Show fewer ↑up to 258d gap
- New Hampshire State AGbd_9eb6e7a4c7d5c6592026-04-10 · +255dVerified by operator
- Vermont State AGbd_fdb466d7085a68c72026-04-10 · +255dVerified
- Texas State AGbd_0d0fcb4fb3e718f62026-04-13 · +258dVerified by operator
Filing propagation · 8 filings · 7 states
View merged incident ↗Pattern: first filing Jul 29, last Apr 13 (TX) — a 258-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
worldleaks
According to ransomware.live, World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation, shifting its focus from file encryption to solely stealing sensitive data and threatening to leak it unless a ransom is paid