Skender Construction Hit by Ransomware Attack, Exposing Sensitive Data of Over 1,000 Individuals Chicago-based general contractor Skender Construction disclosed a ransomware attack in an April 5 filing with the Maine Attorney General’s office, affecting 1,067 individuals. The breach, discovered earlier this year, may have exposed sensitive personal information, including names, addresses, dates of birth, Social Security numbers, driver’s license and passport details, direct deposit data, and potentially health records if provided to the company. Upon detecting the incident, Skender engaged cybersecurity experts to assist its IT team in restoring systems from backups. Due to its preparedness and IT infrastructure investments, the company avoided paying the ransom demanded by the attackers. While the notice did not confirm whether customers were impacted, Skender stated the attackers appeared motivated by financial gain rather than data theft. As part of its response, Skender is offering one year of identity monitoring services through risk mitigation firm Kroll to affected individuals. The company, which serves high-profile clients like LinkedIn, Google, Salesforce, and major healthcare institutions, has not provided further public comment on the incident. The attack underscores the growing cybersecurity risks facing construction firms, a sector increasingly targeted by ransomware groups. Earlier this year, Simpson Manufacturing and Builders Mutual Insurance Co. also reported cyber incidents, highlighting vulnerabilities in the industry’s digital infrastructure.

The Maine Office of the Attorney General reported a data breach at Skender Construction, LLC, which occurred between February 15, 2024, and March 16, 2024. The breach was discovered on March 27, 2024, and affected 1,067 individuals, including 1 resident. The compromised information potentially included driver's license numbers. Identity theft protection services from Kroll were offered for one year.