Legacy Cooperative, an agricultural and community-services cooperative based in North Dakota, detected suspicious activity causing a network disruption on March 30, 2026. An investigation determined that an unauthorized actor gained access to the network and acquired certain files. The organization completed its data review to identify impacted individuals on September 3, 2026, and notified state regulators and affected parties in late October 2026.
Reports indicate that up to 8,836 individuals nationwide may have been affected, though regulatory filings in states like Indiana, Massachusetts, and Vermont reflect smaller state-specific tallies. The compromised information confirmed by state regulatory listings includes names and Social Security numbers.
Consumer notification letters were issued beginning October 28, 2026. Additional details regarding the exact scope or further compromised data categories may continue to develop as regulatory documentation updates.