Legacy Professionals LLP

Legacy Professionals LLP suffered an external system breach (hacking) on April 25, 2024, which compromised the personal data of 60 residents. The incident was detected much later, on January 31, 2025, and affected individuals were notified on February 27, 2025. While the exact type of exposed data (e.g., financial, PII) was not specified, the breach prompted the company to offer 24 months of identity theft protection services via IDX, suggesting a significant risk of fraud or misuse of the leaked information. The delayed discovery (nearly 9 months) and notification (over 10 months post-breach) further amplify concerns about the company’s cybersecurity posture and response efficiency. The breach’s scale, though limited to 60 individuals, indicates a targeted or opportunistic attack with potential long-term repercussions for the victims, including identity theft or financial fraud.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/869d41de-c894-49f3-be2a-639077db5b36.html

TPRM report: https://www.rankiteo.com/company/legacy-professionals-llp

"id": "leg801082025",
"linkid": "legacy-professionals-llp",
"type": "Breach",
"date": "4/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 60,
                        'location': 'Maine, USA',
                        'name': 'Legacy Professionals LLP',
                        'type': 'Organization'}],
 'customer_advisories': 'Identity theft protection services offered for 24 '
                        'months via IDX',
 'data_breach': {'number_of_records_exposed': 60,
                 'personally_identifiable_information': True},
 'date_detected': '2025-01-31',
 'date_publicly_disclosed': '2025-02-27',
 'description': 'The Maine Office of the Attorney General reported that Legacy '
                'Professionals LLP experienced an external system breach '
                '(hacking) on April 25, 2024, affecting 60 residents. The '
                'breach was discovered on January 31, 2025, and individuals '
                'were notified on February 27, 2025. Identity theft protection '
                'services are being offered for 24 months through IDX.',
 'impact': {'data_compromised': True, 'identity_theft_risk': True},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Notification to affected individuals '
                                        '(2025-02-27)'},
 'title': 'Legacy Professionals LLP External System Breach (2024)',
 'type': 'External System Breach (Hacking)'}