Turner Construction Confirms Cyberattack; Hackers Claim Military Files Were Exposed
Summary
Turner Construction confirmed an attack between July 2 and 15 and notified more than 13,000 potentially affected people. The ransomware group Payout Kings claimed it obtained 27.2 TB of data, including military files; Turner’s investigation is ongoing.
Key points
- Turner said the cyberattack occurred between July 2 and July 15 and notified more than 13,000 potentially affected individuals.
- Turner’s letters said exposed information included Social Security numbers, bank account information and passport numbers.
- Ransomware group Payout Kings claimed responsibility and said it obtained 27.2 terabytes of data, including military project files and NDAs; these claims have not been confirmed by Turner.
- Turner did not say whether government secrets were obtained. Some information was reportedly subject to International Traffic in Arms Regulations, according to Claim Depot.
- The company hired outside cybersecurity and forensic experts, and its detailed review is ongoing.
- Turner is offering affected individuals five years of credit monitoring and says law enforcement, regulators and credit reporting agencies have been notified.
Article Details
- Victim Organization
- Turner Construction
- Incident Type
- Cyberattack and data breach; Payout Kings claimed responsibility and described it as a hack.
- Data Types Exposed
- Social Security numbers
- Bank account information
- Passport numbers
- The group also claimed the data included military project files, engineering documents, legal and litigation records, correspondence, financial records, contracts, NDAs, and other agreements.
- Affected Records
- More than 13,000 individuals were potentially affected. State disclosures listed 6,098 California residents, 3,683 Texas residents, 3,643 Massachusetts residents, and 38 Vermont residents.
- Affected Data Size
- Payout Kings claimed it obtained 27.2 terabytes of data; this figure was not confirmed by Turner.
- Operational Impact
- Turner confirmed a cyberattack occurring July 2–15. The article reports no specific operational disruption. Turner hired cybersecurity and forensic experts, and said its investigation was ongoing.
- Ransom Or Extortion
- Payout Kings claimed responsibility and said it obtained data. The article does not report a ransom demand or confirm extortion.
- Claim Status
- confirmed
Threat Actors
Industries
ConstructionFor nearly two weeks, Turner Construction experienced a data breach that hackers claim included military project files, nondisclosure agreements and personal information. Defenseunder the International Traffic in Arms Regulations — rules regarding the import and export of defense-related items to protect national security — according to Claim Depot, which first reported the incident.