Legacy Works Data Breach Exposes Sensitive Personal Records

Administration & Support, Inc., operating as Legacy Works, is a specialized third-party vendor handling human resources, payroll, and administrative tasks for many organizations. Their core business involves managing vast databases containing sensitive personal and financial information. The security incident reported by Legacy Works to the Maryland Attorney General in March 2025 underscores the critical vulnerabilities present in centralized back-office systems that store such high-value data.

While specific forensic details of the attack are still emerging, breaches impacting administrative and payroll processors typically involve sophisticated cyberattacks. These often include unauthorized intrusions, ransomware deployments, or the compromise of privileged user credentials, allowing attackers to access deep repositories of employee records and financial data that have been collected over time.

The data compromised in this breach includes a dangerous combination of core identity and financial elements. Specifically, Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Home Address, and Employee ID Number were exposed. Unlike a credit card that can be easily replaced, these core identifiers create long-term risks, including tax fraud, unauthorized loan applications, synthetic identity creation, and direct financial account takeover, demanding years of vigilant monitoring.

Under federal and state laws, including the Maryland Personal Information Protection Act, Legacy Works had a strict legal obligation to implement and maintain reasonable security measures to protect the highly sensitive information it handled. Given the nature of the data processed, payroll and administrative service providers are held to high standards of care. A breach of this magnitude suggests potential failures in foundational cybersecurity protocols, which may constitute actionable negligence under the law.

If you received a data breach notification letter from Administration & Support, Inc. dba: Legacy Works, it means the company acknowledges your confidential records were compromised due to inadequate security. This notification provides the necessary standing for affected individuals to participate in a class action lawsuit. You do not need to prove actual identity theft or financial loss to seek recovery for the increased risk, time spent monitoring accounts, and emotional distress. Our team is actively investigating this matter, and we offer free case reviews on a contingency fee basis.