Legacy Health, LLC is committed to protecting the confidentiality and security of patient information. Legacy Health provides revenue cycle management services to several health care providers, and as part of those services, Legacy Health processes some patient information.

On August 26, 2025, we discovered that one of our workforce members inadvertently uploaded a spreadsheet containing patient information to a cloud-based software developer platform. Upon discovering the issue, we removed the spreadsheet from the platform and launched an investigation. We determined that the spreadsheet was uploaded to the platform on July 31, 2025, and that it may have been downloaded by unknown platform users between July 31, 2025 and August 26, 2025.

The spreadsheet contained some of our provider customers’ patients’ names, dates of service, insurance providers, treatment locations, treating physicians, cities of residence, and medical record numbers related to treatment at their health care providers.

Social Security numbers were not involved in this incident.

We take this issue very seriously. To help prevent a similar incident from occurring in the future, we are reviewing our policies and procedures, and revising them as necessary. We have also implemented technology to restrict access to third-party cloud resources from our systems, provided training to all workforce members on this issue, and installed additional monitoring tools to help identify unexpected activity.

On October 23, 2025, we sent notification letters to patients of our impacted health care provider customers informing the patients about this incident.[1] We remain committed to protecting the confidentiality and security of the information we maintain and apologize for the concern this may cause. If patients have questions, they should call 833-594-5314, from Monday through Friday, from 9:00 a.m. to 9:00 p.m. Eastern Time, excluding major U.S. holidays.