Skip to content

Legacy Health

Disclosed Oct 23, 202511 months ago6,547 affectedConfirmed

Official notice

What is known

People affected6,547 (as reported to HHS)
DisclosedOct 23, 2025
DiscoveredAug 26, 2025
HappenedJul 31, 2025
AttackInsider
Data exposedNames, Health, Insurance
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report: Legacy Health (Business Associate, TX)ocrportal.hhs.gov · Official notice
Texas Attorney General data security breach report BR-0004624: Legacy Healthoag.my.site.com · Official notice

Notices filed

WhereFiledPeople
HHS OCRtotalOct 23, 20256,547
Texas AGresidents of TXOct 24, 20254,031

Other breaches at Legacy Health

BreachAffected
Disclosed Nov 23, 2022Nov 23, 20223 years agoHacking8,065
Disclosed Aug 20, 2018Aug 20, 20188 years agoHacking38K
History of this record
  • 2026-09-25 · data_types: ["names","health"] to ["names","health","insurance"] · backfill source
  • 2026-09-25 · discovered: empty to 2025-08-26 · backfill source
  • 2026-09-25 · occurred: empty to 2025-07-31 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Legacy Health

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.