HackingIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Legal Services of Long Island
bd_dc18512df09f80f5 · schema v1 · pii pii-v1
Full breach record for Legal Services of Long Island →Legal Services of Long Island, Inc. notified Massachusetts AG on June 1, 2026, of a security incident discovered November 23, 2025. An unauthorized third party accessed systems and removed data, potentially exposing names, DOBs, SSNs, and health information. The company engaged forensic specialists, reset passwords, and severed access. Affected individuals are offered 12-24 months of credit monitoring and dark web scanning via IDX.
Massachusetts clock✗ MA AG >90d27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b888427c988b6d86Indiana State AGfiled 2026-06-01Verified
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-968-legal-services-of-long-island/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 1, 2026
- Raw hash
- 7d67486bb965e973453ab6ea8a3370af93e60a4109bb135ea692b5cdfb86d72b
Reporting entity
- Name
- Legal Services of Long Islandnorm: legal services of long island
- Domain
- legalservicesli.org
Victim entity
- Name
- Legal Services of Long Islandnorm: legal services of long island
- Domain
- legalservicesli.org
Incident
- Discovered
- Nov 23, 2025
- Materiality determined
- —
- Notification sent
- Jun 1, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 weeks(190 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.