Classic Residence Management

Classic Residence Management Limited Partnership d/b/a Vi Senior Living reported a data security incident affecting 22 New Hampshire residents. On March 13, 2023, the company learned an unauthorized third party accessed its corporate network. Malware installed by the actor exfiltrated files from a corporate data server. The company contained the incident by taking community IT networks offline and engaged forensic experts. Personal information was confirmed in the exfiltrated files on July 25, 2023. Affected individuals were notified starting September 29, 2023, and offered one year of complimentary credit monitoring.

Vi Senior Living (Classic Residence Management Limited Partnership) notified the California AG of an unauthorized access to its corporate office network and data server occurring between March 10 and March 13, 2023. The company discovered the access on March 13, 2023. An unauthorized third party accessed files containing personal information, including names and potentially other identity data. The company took networks offline, engaged forensic experts, and reported to law enforcement. Complimentary credit monitoring was offered.

Classic Residence Management Limited Partnership d/b/a Vi Senior Living reported a supplemental data security incident affecting 2 New Hampshire residents. On March 13, 2023, an unauthorized third party gained access to Vi's corporate network. Malware was installed, and files were exfiltrated. On July 25, 2023, it was determined that the files contained personal information, including names. Vi took networks offline, engaged forensic experts, notified law enforcement, and offered credit monitoring. This notice updates the count of affected NH residents.

Classic Residence Management Limited Partnership dba Vi Living disclosed a March 2023 data breach where an unauthorized third party accessed its corporate network. The incident exposed basic PII (names) of residents. Vi Living took networks offline, engaged forensic experts, reported to law enforcement, and offered one year of Experian credit monitoring to affected individuals.

Vi Living (Classic Residence Management Limited Partnership) disclosed that an unauthorized third party gained access to its corporate office network and data server between March 10 and March 13, 2023. The company discovered the access on March 13, 2023. Forensic investigation determined that files containing personal information, including names, were accessed. The company took community-based IT networks offline, engaged forensic experts, and notified law enforcement. Complimentary credit monitoring was offered to affected individuals.

Vi Senior Living, a healthcare organization, reported an external system breach that occurred from March 10 to March 13, 2023, and was discovered on July 25, 2023. The breach affected 61,425 individuals, compromising their names and Social Security numbers. The company provided written notification to affected residents and offered 12 months of identity theft protection services through Experian.

Vi Living (dba Classic Residence Management LP) notified Montana residents of a March 2023 data breach where an unauthorized third party accessed the corporate network. Personal information including names was accessed. The company engaged forensic experts, reported to law enforcement, and offered one year of Experian credit monitoring.

Vi Living (Classic Residence Management Limited Partnership) disclosed that an unauthorized third party gained access to its corporate office network and data server between March 10 and March 13, 2023. The company detected the access on March 13, 2023, and immediately took community-based IT networks offline. Forensic investigation determined that files containing personal information, including names, were accessed. The company engaged forensic experts, notified law enforcement, and offered one year of complimentary identity protection services to affected individuals. The incident is considered contained.

Classic Residence Management Limited Partnership dba Vi Living reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-10 and was reported on 2023-09-29. 20 Indiana residents were affected. 61,425 individuals affected in total.

Classic Residence Management Limited Partnership d/b/a Vi Living reported an external system breach (hacking) occurring between March 10 and 13, 2023, discovered on July 25, 2023. The incident affected 61,425 individuals, including 2 Maine residents. Personal information acquired included names and Social Security Numbers. The entity provided 12 months of credit monitoring through Experian.

Classic Residence Management Limited Partnership (d/b/a Vi Living) reported a cybersecurity incident to the New Hampshire Attorney General on September 29, 2023. The company learned on March 13, 2023, that an unauthorized third party gained access to its corporate network. The attacker installed malware and exfiltrated files from a corporate data server. The investigation determined the files contained personal information (names) of 4 New Hampshire residents. Vi engaged forensic experts, took networks offline, notified law enforcement, and offered credit monitoring to affected individuals.

Classic Residence Management reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-29. 17 Massachusetts residents were affected. The report records the breach type as electronic.

Classic Residence Management dba Vi Senior Living reported to HHS on 2023-06-02 a Hacking/IT Incident affecting 12,405 individuals. Breached information located on Network Server. The incident involved ransomware encrypting PHI including names, SSNs, and financial data.

CLASSIC RESIDENCE MANAGEMENT LIMITED PARTNERSHIP DBA. VI LIVING filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-681). The register records the breach as discovered on April 13, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.