Legacy Professionals data breach settlement
Johnson, et al. v. Legacy Professionals, LLP
Also known as Legacy Professionals LLP; Legacy data breach; Legacy Professionals data incident; Johnson v. Legacy Professionals
The lawsuit claimed a 2024 breach at Legacy Professionals exposed SSNs, passport numbers and health data.
Copied from the official notice. Last compared Nov 3, 2026.
- You could get
- About $75 Up to $5,000 for losses you can show with paperwork.
Source
“a pro rata cash payment estimated to be $75”
From the administrator site: Official settlement website FAQ. Last compared Nov 3, 2026.
- You need
- No receipt needed Needs the code from your notice Class Member ID from your notice (the online form asks for it first) Some paperwork: describes the claim form only
Source
“Reasonable documentation is third-party documentation such as receipts, invoices, credit card statements, phone bills, or other documentation not “self-prepared” that demonstrates the costs incurred.”
From the administrator site: Official settlement website FAQ. Last compared Nov 3, 2026.
- Who can file
- Data possibly exposed in Legacy Professionals' April 2024 breach
Source
“The Settlement Class consists of all persons whose personally identifiable information and/or personal health information was potentially accessible in the Data Incident, including all persons who were sent a notice of the Data Incident. ... Yes, Legacy’s officers and directors are excluded from the Settlement Class, as well as (i) all Settlement Class Members who timely and validly request exclusion from the Settlement Class; (ii) the judges assigned to the Litigation and to evaluate the fairness, reasonableness, and adequacy of this Settlement; (iii) governmental entities;”
From the administrator site: Official settlement website FAQ. Last compared Nov 3, 2026.
- Where
- Anywhere in the U.S.
Source
“The Settlement Class consists of all persons whose personally identifiable information and/or personal health information was potentially accessible in the Data Incident, including all persons who were sent a notice of the Data Incident.”
From the administrator site: Official settlement website FAQ. Last compared Nov 3, 2026.
- Time to file
- About 4 minutes
Source
Our estimate of how long the official claim form takes. The notice does not say.
From the official site: lpdataincident.com. Last compared Nov 3, 2026.
Free. The official site never charges.
Quick answers
How much is the Legacy Professionals data breach settlement payout?
About $75. Up to $5,000 for losses you can show with paperwork.
Where is the Legacy Professionals data breach settlement claim form?
On the official site, lpdataincident.com. Filing is free. The last day to file is Jan 12, 2027.
When will the Legacy Professionals data breach settlement pay?
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Jan 26, 2027.
Is the Legacy Professionals data breach settlement legit?
The settlement administrator (the company that handles claims) is Kroll, and the official site is lpdataincident.com. Real notices point there; if a link in a message goes anywhere else, do not use it.
The official site never asks you to pay to file.
Compare yourself to the official class definition
You may be included if your personal or health information was potentially accessible in the Legacy Professionals data incident.
It covers the April 2024 incident, including everyone who was sent a notice of it.
You are not included if you are a Legacy officer or director, a judge assigned to the case, or a government entity.
Check each condition yourself. The boxes are only for you; nothing is sent or stored.
The Settlement Class consists of all persons whose personally identifiable information and/or personal health information was potentially accessible in the Data Incident, including all persons who were sent a notice of the Data Incident.
From the administrator site: Official settlement website FAQ
This checklist is for guidance only and can be wrong. Only the court's definition decides. Read the official wording before you file.
Official payout table
The amounts the settlement itself sets. We do not work out a personal amount.
| Option and condition | Amount |
|---|---|
| Out-of-pocket losses you can show with paperworkThe most one claim can get | Up to $5,000 |
| Cash payment (a share of the fund)Estimate; can change with the number of claims | $75 |
The $75 is an estimate and may be adjusted depending on how many people file. Both may be claimed. Losses need third-party documents.
Reimbursement of Out-of-Pocket Losses: Reimbursement of up to $5,000 for documented out-of-pocket losses and expenses incurred as a result of the Data Incident; and Pro Rata Cash Payment: A pro rata (proportional) cash payment, estimated to be $75. Credit Monitoring: Twenty-four (24) months of three (3) bureau credit and identity theft monitoring will be provided for those Settlement Class Members who elect and submit valid claims for such credit and identity theft monitoring.
From the administrator site: Official settlement website FAQ
Estimates can change with the number of valid claims and court deductions. Guidance only.
How to file
-
Find the code from your notice
- Class Member ID from your notice (the online form asks for it first)
-
Gather what you need
No proof of purchase is required.
- For out-of-pocket losses: receipts, invoices, statements or other records you did not make yourself
-
File online, or by mail
At lpdataincident.com, by Jan 12, 2027. Filing is free.
Or mail a paper claim form to:Johnson, et al. v. Legacy Professionals, LLP, c/o Kroll Settlement Administration LLC, P.O. Box 5324, New York, NY 10150-5324
The deadline note says: “Online by 11:59 p.m. CT on January 12, 2027 (the online form asks for the Class Member ID from your notice), or by mail postmarked by January 12, 2027.” -
Save your confirmation
Keep your confirmation number or email. You do not need to file again.
Confirm with the administrator before you act.
After you file
Payment can only happen after the court gives final approval and any appeals are over.
The final approval hearing is set for Jan 26, 2027.
For context: First payments were issued 52 to 875 days after final approval, based on 15 settlements. Half were paid within 119 days. 1 of the 15 waited on appeals after approval.
Also ending this week
Related settlements
Case details
- Case
- Johnson, et al. v. Legacy Professionals, LLP
- Court
- Circuit Court of Cook County, Illinois, County Department, Chancery Division
- Case number
- 2025CH00542
- Administrator
- Kroll
- Official site
- lpdataincident.com
- Settlement fund
- $3,300,000
- Full payout terms
- Up to $5,000 for documented losses, plus about $75Up to $5,000 for documented out-of-pocket losses (documents required) and a pro rata cash payment estimated at $75 (no documents); both may be claimed. Plus 24 months of three-bureau credit and identity theft monitoring. The fund pays monitoring first, then losses, then pro rata cash, and benefits may be reduced pro rata if claims exceed the fund.
- Effort
- Easy, about 4 minutes
Other dates
- Opt-out (exclusion) deadline
- (ahead) source document
- Objection deadline
- (ahead) source document
- Final approval hearing
- (ahead) source document
The court’s exact words
The Settlement Class consists of all persons whose personally identifiable information and/or personal health information was potentially accessible in the Data Incident, including all persons who were sent a notice of the Data Incident.
Quoted from the official notice. Read the notice for the full definition.
Our notes: The lawsuit is about an alleged April 2024 data breach at Legacy Professionals, LLP in which unauthorized parties allegedly accessed files with personal and health information (names, contact details, dates of birth, financial account, Social Security, passport and driver's license numbers, medical treatment and health insurance information); Legacy began notifying people in February 2025 and denies wrongdoing. Per the settlement website, the class is all persons whose PII and/or PHI was potentially accessible in the incident, including everyone sent a notice. Excluded: Legacy's officers and directors, people who opt out, the judges assigned to the case, governmental entities, and anyone convicted of (or pleading no contest to) the criminal activity. Read the FAQ for the full definition.
Sources and checks (3)
Every fact people act on was copied from the official source and compared with it. How we check
- Official settlement website FAQ administrator site
- Official settlement website home page administrator site
- Official online claim form (first screen) administrator site
What changedLast change Oct 27, 2026
- Page created. Claims open until January 12, 2027. source document
Questions
I already filed. What now?
Keep your confirmation number or email. You do not need to file again. Payment can only happen after the court gives final approval; once it does, the payment status page shows what is known.
Opting out
To leave the settlement and keep your right to sue on your own, follow the official notice by Dec 14, 2026. If you opt out, you get no payment. Opting out and objecting have separate rules; we cannot tell you which is right for you.