The Leggett & Platt, Incorporated Employee Benefits Plan data breach involved unauthorized activity identified within the systems of MedImpact Healthcare Systems Inc., the plan's pharmacy benefits manager, on October 18, 2025. MedImpact secured the affected systems and engaged cybersecurity experts to investigate. The California Attorney General's Office received a breach notification for the plan on September 15, 2026.
The information potentially involved varied by individual and may have included first and last names and other personal information. The available notice does not state that Social Security numbers, medical records, health insurance information, or financial information were exposed. It also does not disclose an entity-level number of affected individuals. Further details may be provided through later notices or regulatory updates.