Legacy Works Reports Data Breach to Maryland AG in 2025

Administration & Support, Inc., known by its trade name Legacy Works, has filed a report regarding a data security incident with the Maryland Attorney General. This filing, made on March 14, 2025, indicates a breach involving the sensitive information handled by the company in its role as a third-party administrative, human resources, and payroll processing vendor.

Legacy Works typically maintains extensive databases containing personal and financial profiles necessary for its operations, which include managing back-office functions, employee records, benefits, and multi-state tax withholdings. While the specific details surrounding how the breach occurred are not fully public, such incidents often involve sophisticated cyberattacks targeting vulnerabilities in enterprise networks or compromised credentials.

The data categories reportedly exposed in this incident include Full Name, Social Security Number, Date of Birth, Wage and Compensation Information, Tax Return Information, Direct Deposit Account Details, Home Address, and Employee ID Number. The exposure of this combination of core identity and financial data poses significant long-term risks for affected individuals, potentially leading to identity theft, various forms of fraud, and unauthorized account access.

Individuals who receive notification regarding this breach are advised to take immediate protective measures. This includes reviewing all financial account statements and explanations of benefits for any unauthorized activity. It is also strongly recommended to obtain and review free credit reports from the three major bureaus and consider placing a fraud alert or security freeze on credit files to prevent new accounts from being opened fraudulently. Remaining vigilant against phishing attempts, particularly emails or calls requesting personal information, is also crucial.