LEGACY HEALTH

"Legacy Health LLC" is a healthcare company that aims to provide high-quality healthcare services and improve health conditions. It offers a variety of healthcare services such as hospital care, medical clinics, home health services, and more. It focuses on promoting a healthy lifestyle, preventing disease, and managing chronic conditions. The company also emphasizes customer satisfaction, quality care, transparency, and integrity in their services.

Legacy Health LLC notified Massachusetts residents that their personal information, including name, Social Security number, and bank account number, and possibly driver's license number, was involved in an incident. The company is offering 24 months of complimentary identity protection services through IDX and states it is implementing enhanced safeguards and security training.

Legacy Health, LLC based in Dallas, Texas, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-08-26 and reported on 2025-10-24. 4,031 Texas residents were affected. 4,100 individuals affected in total. Types of information involved: Name of individual;Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

Legacy Health, LLC reported to HHS on 2025-10-23 a Unauthorized Access/Disclosure affecting 6547 individuals. Breached information located on Electronic Medical Record.

LEGACY HEALTH, LLC filed a data-breach notice with the Illinois Attorney General in October 2025 (case 25-10-541). The register records the breach as discovered on August 26, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Legacy Health reported to HHS on 2022-11-23 an Unauthorized Access/Disclosure affecting 8,065 individuals. A workforce member impermissibly downloaded PHI (including SSNs, diagnoses, and insurance info) to personal storage devices. Breached information located on Other Portable Electronic Device.

Legacy Health reported an insider incident on July 25, 2022, where an employee unauthorizedly saved patient files to external devices. 1,608 Washington residents were affected, with data including names, DOBs, MRNs, PHI, and one SSN. The employee was terminated, law enforcement was notified, and notifications were mailed on Nov 23, 2022, after a law enforcement hold.

Legacy Health reported a data breach to the Oregon Attorney General. The breach was reported on 2018-08-21. The breach occurred during 5/26/2018 - 5/26/2018. The breach was discovered on 6/21/2018. 34,000 individuals were affected. Notice was sent on 8/20/2018.

On June 21, 2018, Legacy Health learned that an unauthorized third party may have gained access to some employees’ email accounts in May 2018, affecting approximately 38,000 individuals. The types of protected health information (PHI) involved in the breach included patients’ names, dates of birth, insurance information, billing information, driver's license numbers, Social Security numbers and medical information.