Chicago old age residential management firm Vi Living says data breach impacted 61k customers

Chicago-based residential management company Vi Living said it suffered a cyber security incident that compromised the sensitive personal information of more than 60,000 individuals.

Classic Residence Management Limited Partnership, commonly known as Vi Living (Vi), is a high-end retirement community developer, owner, and management group. With more than 2,900 employees, the company operates ten senior living communities in the United States.

In a data privacy notice posted on its website, Vi said that it identified unauthorised access to certain parts of its internal network on March 13 and immediately appointed external cyber security experts to investigate the nature and scope of the incident. The company said it also notified law enforcement authorities about the cyber attack.

“Through the forensic investigation, Vi learned that some files from Vi’s corporate office data server were accessed by the unauthorised third-party, and on July 25, 2023, Vi determined that the files contained personal information,” Vi said.

The company’s investigation revealed that the compromised information included the names, addresses, dates of birth, Social Security numbers, financial account numbers, payment card numbers, medical treatment information, and health insurance information of customers.

In a recent filing with the Office of the Maine Attorney General, Vi said that the security incident affected at least 61,425 individuals.

On 14th December 14, Vi began notifying the affected individuals whose data was compromised during the data security incident.

“Individuals should refer to the notice they will receive in the mail regarding steps they can take to protect themselves, should they feel the need to do so. Vi has no reason to believe that any personal information has been misused for the purpose of committing fraud or identity theft, but as a precautionary measure, individuals should remain vigilant to protect against potential fraud and/or identity theft by, among other things, reviewing their account statements and monitoring credit reports closely,” Vi said.

“If individuals detect any suspicious activity on an account, they should promptly notify the financial institution or company with which the account is maintained. They should also promptly report any fraudulent activity or any suspected incidents of identity theft to proper law enforcement authorities, including the police and their state’s attorney general,” the retirement management company added.

The company said that it is offering complimentary credit monitoring and identity theft protection services through Experian IdentityWorks to all the individuals whose personal data has been compromised in the incident.