David Evans Enterprises Data Breach Exposes Nearly 9,000 Individuals David Evans Enterprises Inc., a Portland, Oregon-based civil engineering and consulting firm, disclosed a data breach affecting 8,915 individuals across the U.S., including four Maine residents. The incident was reported to attorneys general in California and Maine on April 10, 2026, after the company discovered the breach on March 23, 2026. The breach occurred over a two-day period (February 26–27, 2026), with nearly a month passing before detection. Affected individuals began receiving written notifications on April 10, 2026, roughly two and a half weeks after the discovery. While the company has not publicly disclosed the full scope of exposed data, names were confirmed as part of the compromised information. In response, David Evans Enterprises is offering 12 months of free credit monitoring and identity protection services through Cyberscout (a TransUnion company), along with proactive fraud assistance. Affected individuals must enroll within 90 days of receiving their notification letter. The company has not provided further details on the breach’s cause or additional compromised data types.