Legacy Treatment Services
ent_5bad4061e9d7bceea62a868f
Disclosures
7
State AG · HHS OCR · Leak Site · 7 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
41,826
nationwide · State AG ME
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Legacy Treatment Services
- Normalized
- legacy treatment— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- legacytreatment.org
Disclosure history (7)newest first
- New Hampshire State AGas victim2025-08-25
Legacy Treatment Services, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting 3 NH residents. Unauthorized access occurred between Oct 6-11, 2024. Data included names, SSNs, and health info. Legacy engaged forensic investigators, took systems offline, and notified law enforcement. Notifications to residents began Aug 22, 2025, offering credit monitoring.
- Massachusetts State AGas victim2025-08-23
Legacy Treatment Services reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-23. 4 Massachusetts residents were affected.
- Indiana State AGas victim2025-08-22
Legacy Treatment Services reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-06 and was reported on 2025-08-22. 1 Indiana residents were affected. 10,978 individuals affected in total.
- Vermont State AGas victim2025-08-22
Legacy Treatment Services, Inc. reported a cybersecurity incident impacting network connectivity. Unauthorized access and acquisition of personal data (names) occurred between Oct 6-11, 2024. Incident discovered July 18, 2025. Law enforcement notified. IDX identity protection services offered. No evidence of misuse. Rhode Island residents impacted.
- Maine State AGas victim2025-08-22
Legacy Treatment Services, Inc. reported an external system breach (hacking) occurring between October 6-11, 2024. The incident impacted approximately 41,826 individuals, including 2 Maine residents. Personal information potentially accessed included names and government identifiers. Notices were sent on August 22, 2025, offering 12 months of identity theft protection.
- NEW JERSEYHHS OCRas victim2024-12-31
Legacy Treatment Services, Inc. (NJ) reported to HHS OCR on 2024-12-31 a Hacking/IT Incident affecting 29,898 individuals. Breached information was located on a Network Server. No business associate was identified as involved. No further detail is available in the HHS web description.
- GLOBALLeak Siteas victim2024-10-26
Legacy Treatment Services has locations in Burlington, Atlantic, Camden, and Middlesex counties. They offer mental and behavioral health services, addiction services, counseling, medication management and more. And we offer you internal documents, patient records, and a large SQL database.