
Heritage Communities Breach
Oct 9, 2025
933,870 rows
What happened in the Heritage Communities Breach?
DataBreach.com Team · October 28th 2025, 8:00 pm EDT
Heritage Communities has not posted a public breach notice or acknowledgment. The incident is known from a threat-actor claim and third-party leak-site trackers. Worldleaks has publicly claimed responsibility; the victim has not issued technical attribution.
Snapshot (at a glance)
- Company: Heritage Communities (senior living), HQ Omaha, NE, operates in AZ, IA, NE, TX
- Domain: heritage-communities.com
- What we know: DataBreach.com parsing found 933,900 emails, 130,300 addresses, 9,400 phones & 5,500 SSNs.
- Timeline: Incident surfaced publicly in early October 2025; no company or regulator notice located yet
- Vector: Unknown; no description of initial access or exfiltration from the company
- Actor: Worldleaks posted a claim; victim has not attributed
- Official count: Not published
Last updated: October 29, 2025
What happened
There is no public notice on the company website and no regulator filing located at time of publication. The Heritage Communities listing appeared on a threat-actor leak site monitored by multiple trackers. No official timeline or intrusion vector has been published by the company.
Who’s behind it
Worldleaks is a data-extortion operation active since 2025 that runs a leak site to pressure victims with “steal-and-leak” tactics, often emphasizing data publication over disk encryption. Several trackers and researchers describe Worldleaks as connected to, or a rebrand/offspring of, Hunters International (itself linked by researchers to the earlier Hive ecosystem). Worldleaks listed Heritage Communities in early October 2025. The company has not released indicators tying the event to the group.
What was breached
DataBreach.com parsing (distinct values): 933,900 unique emails, 130,300 unique home addresses, 9,400 unique phone numbers, 5,500 unique Social Security numbers.
Distinct counts can overlap across individuals. Official totals may differ if and when company or regulator disclosures are posted.
Timeline
- Early Oct 2025: Heritage Communities appears on leak-tracking feeds as a Worldleaks victim
- Oct 26, 2025: Entry added to the DataBreach.com directory
- TBD: Company notice or regulator filing (add links when available)
Company response
No public breach notice was found on the Heritage Communities website at the time of publication.










