Subscribe To Our Newsletter
Subscribe To Our Newsletter
Legends Hospitality, LLC, has agreed to an $812,900 settlement to resolve a class action lawsuit following three data breaches between November 2024 and January 2025. The security incidents exposed the Social Security numbers, financial info, and medical details of roughly 16,258 people.
If you had your personal information compromised during cyberattacks on Legends Hospitality, you could be eligible to claim up to $5,000 in cash reimbursements or a $200 flat payout under a new $812,900 class action settlement.
The class action settlement resolves a lawsuit filed in the Superior Court for New York County, New York, against Legends Hospitality, LLC. The legal action, titled Julianne Cook, et al. v. Legends Hospitality, LLC, stems from three separate targeted cyberattacks on the company’s computer systems that occurred in November 2024, December 2024, and January 2025.
Legends Hospitality is a global venue services company that provides operations, concessions, and management for major sports stadiums and entertainment venues across the United States. According to court records, hackers bypassed the company’s digital security networks and gained unauthorized access to private files stored on its internal servers. The security failures occurred over a three-month window, potentially leaving the personal, medical, and financial data of thousands of consumers exposed.
Following an internal investigation to evaluate the scope of the unauthorized access, Legends Hospitality determined that a massive amount of highly confidential information had been compromised. Rather than taking swift action to secure the network immediately, plaintiffs in the lawsuit alleged that the company failed to implement industry-standard cybersecurity measures to protect the private data in its care. Legends Hospitality denies any wrongdoing but agreed to pay $812,900 to settle the class action lawsuit and avoid the costs, risks, and distractions of continued litigation.
If your data was stored in the company’s systems, you might be one of the thousands of individuals left vulnerable by these security lapses. Court documents confirm that the three data breaches affected approximately 16,258 people across the United States. These individuals include employees, customers, and partners of the venue management giant.
The information exposed during these security incidents was incredibly sensitive. Depending on the individual, the compromised files may have contained:
Full names and dates of birth
Social Security numbers
Driver’s license and government ID numbers
Financial account information
Medical information and health insurance details
Having this level of personal data exposed on the dark web poses long-term risks to your financial safety. Unlike a stolen credit card that can easily be canceled and replaced, your Social Security number, date of birth, and medical history remain yours for life. Cybercriminals can use this information to commit medical identity theft, open fraudulent lines of credit, or file false tax returns in your name. Because of these persistent threats, everyday people are often forced to spend substantial time and money defending their credit.
When a major company fails to protect your sensitive data, a class action lawsuit provides a direct way for everyday people to seek justice. You should not have to pay the price for a multi-million-dollar corporation’s lack of digital defense. By banding together, affected consumers can successfully hold companies accountable for failing to maintain standard computer system security.
This lawsuit argued that Legends Hospitality had a legal obligation to protect the information in its care. Under various state consumer protection laws and standard negligence principles, companies that collect, store, and profit from personal consumer data are required to utilize robust safeguards to shield that data from hackers.
The plaintiffs argued that the stadium vendor kept highly confidential files on insecure servers, making them an easy target for cybercriminals. While the court has not ruled on who is right, the resulting $812,900 settlement forces Legends Hospitality to pay real cash back to the consumers whose trust was broken. The settlement also helps draw a clear line in the sand, showing corporate entities that ignoring cybersecurity carries steep legal consequences.
If you are an eligible class member, the settlement offers three distinct ways to recover from the impact of the data breaches. The relief is designed to help you cover the direct costs of identity theft or simply compensate you for the hassle of monitoring your credit.
First, you may be eligible to claim up to $5,000 in cash reimbursements for documented out-of-pocket losses. This category covers actual financial losses you suffered between November 9, 2024, and August 19, 2026, as a direct result of the data incidents. Eligible expenses include costs related to identity theft or fraud, credit reports, credit monitoring services, fees for freezing or unfreezing your credit, replacement government IDs, and postage or phone charges. You must provide documentation, such as invoices, receipts, or bank statements, to claim this cash.
Second, if you did not experience any out-of-pocket expenses, you can choose to receive a flat alternate cash payment instead. This no-proof-required option is currently estimated at $200. The final value of this check may increase or decrease proportionally depending on the total number of valid claims submitted. Finally, all class members can claim three free years of CyEx Financial Shield Total, which includes continuous credit monitoring and financial fraud insurance.
To receive a cash payment or enroll in the free credit monitoring service, you must actively submit a claim form. The official, court-approved website is live and accepting submissions at LegendsDataSettlement.com.
If you are an eligible class member, you should have received a physical settlement notice in the mail. This document contains a unique login ID and PIN that you will need to complete your claim online. If you prefer to file your claim offline, you can download a PDF version of the claim form from the official website, print it, and return it by mail to the settlement administrator.
If you wish to participate in the settlement, you must act quickly. The court has set strict deadlines for class members to file a claim, object to the terms, or opt out of the agreement entirely.
If you do not want to participate and wish to retain your right to sue Legends Hospitality on your own over these breaches, you must opt out of the settlement. The deadline to submit an exclusion request or file an objection to the deal is August 4, 2026. If you do nothing, you will remain in the settlement class but will not receive any cash benefits or credit monitoring, and you will give up your right to pursue future legal action regarding these incidents.
The court has scheduled a final approval hearing for September 3, 2026. At this hearing, the presiding judge will determine if the $812,900 settlement is fair, reasonable, and adequate. If the court grants final approval, and there are no legal appeals filed, the settlement administrator will begin distributing cash payments and credit monitoring activation codes. Be aware that the appeals process can take time, so payouts may take several months to arrive.
New cases and investigations, settlement deadlines, and news straight to your inbox.
