Legend Senior Living Discloses Data Breach Affecting Residents’ Sensitive Information
Legend Senior Living LLC, a Wichita, Kansas-based senior housing and services provider, reported a data breach involving unauthorized access to its systems. The incident was disclosed to attorneys general in Maine and New Hampshire on April 10, 2026, affecting at least six Maine and four New Hampshire residents, though the total number of impacted individuals remains undisclosed.
The breach was detected on March 12, 2026, after suspicious activity prompted an investigation. Forensic analysis revealed that an unauthorized actor accessed and potentially exfiltrated files between July 27, 2025, and August 15, 2025. On September 18, 2025, the threat group Worldleaks claimed responsibility, posting alleged stolen data on the Tor network.
Affected files contained sensitive personal information, including names, Social Security numbers, driver’s license numbers, and financial account details. Legend Senior Living completed its review of the breach on March 12, 2026, and began notifying impacted individuals in writing on April 10, 2026.
In response, the company is offering 12 months of free credit monitoring and identity theft protection through Cyberscout (a TransUnion subsidiary), including single-bureau credit monitoring, credit reports, and fraud assistance. Affected individuals must enroll within 90 days of receiving their notification letter. A dedicated assistance line (1-833-289-9995) and mailing address (8415 E 21st St. N, #100, Wichita, KS 67206) have been established for inquiries.
Source: https://www.claimdepot.com/data-breach/legend-senior-living-2026
Legends Senior Living cybersecurity rating report: https://www.rankiteo.com/company/legends-senior-living
"id": "LEG1776098396",
"linkid": "legends-senior-living",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'At least 10 (6 Maine and 4 New '
'Hampshire residents, total '
'undisclosed)',
'industry': 'Healthcare/Senior Living',
'location': 'Wichita, Kansas, USA',
'name': 'Legend Senior Living LLC',
'type': 'Senior Housing and Services Provider'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'Written notifications sent to affected individuals on '
'April 10, 2026, with details on credit monitoring and '
'identity theft protection',
'data_breach': {'data_exfiltration': 'Potential',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Driver’s license numbers',
'Financial account details']},
'date_detected': '2026-03-12',
'date_publicly_disclosed': '2026-04-10',
'description': 'Legend Senior Living LLC reported a data breach involving '
'unauthorized access to its systems, potentially exposing '
'sensitive personal information of residents. The breach was '
'detected after suspicious activity prompted an investigation, '
'revealing unauthorized access and potential data '
'exfiltration. The threat group Worldleaks claimed '
'responsibility and posted alleged stolen data on the Tor '
'network.',
'impact': {'data_compromised': 'Sensitive personal information including '
'names, Social Security numbers, driver’s '
'license numbers, and financial account '
'details',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'initial_access_broker': {'data_sold_on_dark_web': 'Alleged (posted on Tor '
'network by Worldleaks)'},
'investigation_status': 'Completed',
'ransomware': {'data_exfiltration': 'Potential'},
'recommendations': 'Offer 12 months of free credit monitoring and identity '
'theft protection to affected individuals',
'references': [{'source': 'Maine and New Hampshire Attorneys General'}],
'regulatory_compliance': {'regulatory_notifications': 'Disclosed to attorneys '
'general in Maine and '
'New Hampshire'},
'response': {'communication_strategy': 'Written notifications to affected '
'individuals, dedicated assistance '
'line and mailing address',
'third_party_assistance': 'Cyberscout (TransUnion subsidiary)'},
'threat_actor': 'Worldleaks',
'title': 'Legend Senior Living Data Breach Affecting Residents’ Sensitive '
'Information',
'type': 'Data Breach'}