A class action alleged that Legends Hospitality failed to protect private information from targeted cyberattacks on its computer systems in November 2024, December 2024, and January 2025, which may have exposed names, Social Security numbers, driver's license numbers, financial and medical information.
Eligibility
All living U.S. residents whose private information was potentially compromised in the November 2024, December 2024, or January 2025 Legends Hospitality data incidents and/or who were notified by Legends Hospitality about the incidents.
Estimated Payout
Up to $5,000 for documented out-of-pocket losses (identity theft/fraud losses, credit report costs, credit monitoring, credit freeze/unfreeze, replacement IDs, postage) incurred Nov 9, 2024-Aug 19, 2026, OR an estimated $200 cash payment with no proof required; pro rata from an $812,900 settlement fund (16,258 people notified).
Claim Deadline
2026-08-19
Background
The class action, Julianne Cook, et al. v. Legends Hospitality, LLC, filed in the Superior Court for New York County, alleged that Legends Hospitality, a venue management company, failed to protect private information in its care from targeted cyberattacks on its computer systems in November 2024, December 2024, and January 2025. Court documents state that 16,258 people were affected by the three data incidents, which may have exposed names, dates of birth, Social Security numbers, driver's license numbers, financial information, medical information, and health insurance information. Legends Hospitality denies any wrongdoing but agreed to an $812,900 settlement fund to resolve the claims. Class members who submit a timely claim can receive up to $5,000 for documented out-of-pocket losses, or an estimated $200 cash payment without proof. The settlement is administered by Simpluris, and the court will consider final approval at a hearing on September 3, 2026.