Legends International Discloses Data Breach Impacting Employees and Customers
Legends International, a leading provider of food, retail, and venue operations services for live events, has begun notifying affected employees and customers of a data breach resulting from a recent cyberattack.
Headquartered in New York with offices across the U.S. and Europe, Legends detected unauthorized activity within its IT infrastructure on November 9, 2024. In response, the organization initiated incident containment protocols by taking affected systems offline and launching a forensic investigation.
The breach investigation revealed that threat actors had exfiltrated files containing sensitive personally identifiable information (PII), including full names, dates of birth, Social Security numbers, driver’s license and government-issued ID numbers, as well as financial data such as payment card information. Additionally, some files contained protected health information (PHI), including medical and health insurance details.
According to a notification filed with the Texas Office of the Attorney General, more than 8,000 Texas residents were affected by the breach. The total number of impacted individuals across all jurisdictions remains undisclosed.
While there is currently no indication that the stolen data has been weaponized or fraudulently used, Legends is offering complimentary identity theft protection services for two years to those affected.
Although the company’s immediate response—shutting down systems—is consistent with standard procedures for mitigating ransomware incidents, no ransomware group has yet claimed responsibility for the breach.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
