Legal Services of Long Island – Notice of Security Incident
To Whom It May Concern:
Legal Services of Long Island (LSLI) is providing substitute notice of a data security incident (the “Incident”) that may have involved the personal information of current and former clients. This substitute notice is being posted on this website out of an abundance of caution and in accordance with applicable law.
LSLI is a legal services organization that assists low-income individuals in resolving housing issues and obtaining governmental benefits and provides various outreach and community education programs. As part of the services it provides, LSLI received certain personal information of current and former clients. Although we are unaware of any actual identity theft or fraud directly related to the Incident, out of an abundance of caution we are providing information about the Incident, our response, and the incident response services we are providing to the affected individuals.
What Happened?
On or around November 23, 2025, LSLI discovered suspicious activity within our technical environment and immediately engaged cybersecurity and data forensic specialists to contain the Incident, terminate unauthorized access, and assess any potential impact to the LSLI computing environment. On January 5, 2026, the data forensic specialists recovered and began reviewing files accessed by an unauthorized third party. On May 15, 2026, the investigation determined that an unauthorized third party accessed certain systems and removed data that may be connected to this Incident. On June 1, 2026, LSLI provided notice to potentially affected individuals.
What Information was Involved?
The following data elements may have been involved: address, date of birth, Social Security number, and personal health information such as diagnosis information, treatment information, and doctor/medical professional name. To date, we have found no evidence to indicate that the affected individual’s personal information was misused in any way.
What We Are Doing.
In addition to engaging cybersecurity counsel and digital forensics specialists to conduct a thorough investigation, we took immediate action to prevent further access. We reset all account passwords related to the breach, severed the unauthorized user’s access to our system, and took further steps to prevent further access. Additionally, we are implementing enhanced technical and administrative security measures across our network to help prevent further security incidents. We reiterate that we contained the damage and have no evidence of misuse.
Additionally, we are offering identity theft protection services, through IDX, a data breach and recovery services expert. IDX identity theft protection services include: 12 months of 24/7 credit monitoring, a $1,000,000 insurance reimbursement policy, and CyberScan, a tool that searches the dark web to see if your information has been potentially exposed to cyber criminals. IDX identity theft protection services are offered at no charge. We encourage affected individuals to take full advantage of this service offering. The enrollment period is valid until December 2, 2026.
What You Can Do.
Potentially affected individuals may be eligible to enroll in complimentary credit monitoring and identity protection services. Information regarding these services, including instructions for enrollment, is available at https://response.idx.us/legalservicesli. You may contact IDX with any questions by calling 1-855-759-9333.
For More Information.
Victoria Osk
Telephone: (631)-232-2400 ext. 3018
Email: vosk@legalservicesli.org
Additional Information regarding identity theft prevention and protection is available from the New York State Division of Consumer Protection, https://dos.ny.gov/consumer-protection or by calling (800) 697-1220, and from the Federal Trade Commission at https://www.identitytheft.gov or by calling (877) 438-4338.
Sincerely,
Legal Services of Long Island, Inc.