Administration & Support, Inc. dba: Legacy Works data breach

Clerk's notes

Administration & Support, Inc., known as Legacy Works, a third-party administrative and payroll processing vendor, reported a data security incident to Maryland authorities on March 14, 2025. As a core provider of human resources and payroll services, Legacy Works manages extensive databases containing highly sensitive personal and financial information for numerous organizations and their employees.

The reported breach involved several critical data elements, including Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Home Address, and Employee ID Number. The exposure of these foundational identity and financial details creates significant and enduring risks for individuals, as these permanent identifiers are challenging to change and can be exploited for various forms of fraud for years to come.

Given its role as a handler of highly sensitive data, Legacy Works had a legal duty to implement robust security measures to protect the information entrusted to it. A breach impacting such fundamental data suggests potential failures in the company's cybersecurity protocols, which may constitute actionable negligence under federal and Maryland state statutes designed to protect personal information.

If you received a data breach notification letter from Administration & Support, Inc. dba: Legacy Works, this indicates that your confidential information was part of this security incident. Receiving such a notification establishes a basis to explore your legal options regarding the breach. Our firm is currently reviewing this matter and offers a no-cost case review to help affected individuals understand their rights and potential next steps without any upfront fees.

If a notification letter about this breach reached you, see every Maryland data breach on file or browse all cases.