From www.goingconcern.com: (US context) Legacy Professionals LLP, an accounting firm in Illinois, experienced a significant data breach affecting 216,752 individuals, with stolen data including names, social security numbers, and medical information.

The firm discovered unauthorised access to its network in late April 2024 but only confirmed the data theft in November 2024, leading to delayed notifications to impacted clients until December 2024 and individual letters in February 2025.

As a result, Legacy Professionals faces class action lawsuits citing negligence and other claims due to the lengthy notification process and potential further harm to affected individuals.