Turner Construction Discloses Data Breach, Notifies About 6,098 California Residents

Summary
Turner Construction disclosed unauthorized system access between July 2 and 15, 2026, involving files containing personal and financial information. It notified about 6,098 California residents and is offering five years of identity protection.
Key points
- Turner determined that unauthorized access to certain systems occurred between July 2 and July 15, 2026; it confirmed access to files containing personal information on July 27.
- Affected files contained one or more of the following: names, U.S. Social Security numbers, Canadian Social Insurance Numbers, birth dates, salaries, direct-deposit bank details and home addresses. Some may also have contained passport numbers.
- Approximately 6,098 California residents were sent written notices on or about August 18, 2026; this figure is not identified as the total number affected.
- Turner secured its systems, engaged external cybersecurity experts and notified federal law enforcement. The investigation remains ongoing.
- The company is strengthening safeguards and employee training and offering potentially affected individuals five years of credit monitoring and identity protection through IDX and IDShield.
Article Details
- Victim Organization
- Turner Construction Company
- Victim Domain
- tcco.com
- Incident Type
- Unauthorized access to systems and files containing personal information
- Incident Date
- 2026-07-02
- Disclosure Date
- 2026-08-18
- Data Types Exposed
- Names
- Social Security numbers for individuals in the United States
- Social Insurance Numbers for individuals in Canada
- Dates of birth
- Salaries
- Bank account information used for direct deposit
- Home addresses
- Possible passport numbers for a limited number of individuals
- Affected Records
- Approximately 6,098 California residents were notified; the total number of affected individuals and records was not disclosed.
- Affected Data Size
- Not disclosed
- Operational Impact
- Not disclosed
- Ransom Or Extortion
- Not disclosed
- Claim Status
- confirmed
