Legacy Treatment Services
ent_5bad4061e9d7bceea62a868f
Disclosures
6
State AG · HHS OCR · Leak Site · 6 jurisdictions
Incidents
2
filings grouped by incident
Max affected reported
29,898
as filed · HHS OCR NJ
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Legacy Treatment Services
- Normalized
- legacy treatment— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- legacytreatment.org
Disclosure history (6)newest first
- ⛰️New Hampshire State AGas victim2025-08-25
Legacy Treatment Services, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting 3 NH residents. Unauthorized access occurred between Oct 6-11, 2024. Data included names, SSNs, and health info. Legacy engaged forensic investigators, took systems offline, and notified law enforcement. Notifications to residents began Aug 22, 2025, offering credit monitoring.
- 🏎️Indiana State AGas victim2025-08-22
Legacy Treatment Services reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-06 and was reported on 2025-08-22. 1 Indiana residents were affected. 10,978 individuals affected in total.
- 🍁Vermont State AGas victim2025-08-22
Legacy Treatment Services, Inc. reported a cybersecurity incident impacting network connectivity. Unauthorized access and acquisition of personal data (names) occurred between Oct 6-11, 2024. Incident discovered July 18, 2025. Law enforcement notified. IDX identity protection services offered. No evidence of misuse. Rhode Island residents impacted.
- 🦞Maine State AGas victim2025-08-22
Legacy Treatment Services, a healthcare organization, reported an external system breach (hacking) to the Maine Attorney General. The breach was discovered on July 18, 2024, and is noted to have occurred on October 6, 2024. The incident affected 2 Maine residents. The company offered 12 months of identity theft protection services from IDX and planned to send written notifications to affected individuals on August 22, 2025.
- NJHHS OCRas victim2024-12-31
Legacy Treatment Services, Inc. (NJ) reported to HHS OCR on 2024-12-31 a Hacking/IT Incident affecting 29,898 individuals. Breached information was located on a Network Server. No business associate was identified as involved. No further detail is available in the HHS web description.
- GLOBALLeak Siteas victim2024-10-26
Legacy Treatment Services has locations in Burlington, Atlantic, Camden, and Middlesex counties. They offer mental and behavioral health services, addiction services, counseling, medication management and more. And we offer you internal documents, patient records, and a large SQL database.