Kiewit Corporation Data Breach Exposes Sensitive Employee and Contractor Information On August 26, 2026, national class action law firm Edelson Lechtzin LLP announced an investigation into a data breach at Kiewit Corporation, one of North America’s largest construction and engineering firms. The incident, disclosed by Kiewit, involved unauthorized access to an employee’s Microsoft 365 account, potentially compromising the personal data of current and former employees and independent contractors. ### Timeline and Response Kiewit detected the breach after identifying suspicious activity in an employee’s account. The company launched an internal investigation, engaged a third-party forensic firm, and notified law enforcement. Containment measures including a forced password reset and account disablement were implemented. By July 24, 2026, Kiewit completed its review of affected data and reported the incident to the Massachusetts Office of Consumer Affairs and Business Regulation on August 21, 2026. Affected individuals began receiving breach notifications shortly after. ### Exposed Data The breach may have exposed a range of sensitive information, varying by individual. Compromised data could include: - Full names - Addresses - Dates of birth - Social Security numbers - Driver’s license or government-issued IDs - Employment-related health information ### Impact and Risks The exposed data particularly Social Security numbers and financial identifiers elevates the risk of identity theft and financial fraud for affected individuals. The breach underscores vulnerabilities in corporate data protection, as organizations handling sensitive employee information are expected to implement robust security measures. Edelson Lechtzin LLP is evaluating potential legal action on behalf of those impacted, though the investigation remains ongoing. Kiewit has not disclosed the total number of individuals affected.