Turner Construction Suffers Major Data Breach, Exposing Sensitive Personal and Military-Related Data Turner Construction, one of the largest U.S. contractors by revenue, disclosed a significant data breach involving unauthorized access to its systems between July 2 and July 15, 2024. The company confirmed on July 27 that files containing personal information including Social Security numbers, bank account details, salaries, and dates of birth were accessed without authorization. Some files also included passport numbers and documents protected under the International Traffic in Arms Regulations (ITAR), which governs military technology and defense-related exports. The ransomware group Payouts King claimed responsibility for the attack, asserting it exfiltrated 27.2 terabytes of data, including engineering documents, military project files, contracts, and non-disclosure agreements. The group first posted about an unidentified victim on July 24 before naming Turner on August 11, using a Tor network to conceal its identity. Turner engaged third-party cybersecurity and forensic experts to investigate the incident and has begun notifying affected individuals. As of November 18, the company is offering five years of complimentary identity protection services through IDShield and IDX to impacted parties. The breach affected at least 6,098 individuals, including 38 Vermont residents, according to filings with the California and Vermont Attorneys General. Turner, which specializes in data centers and advanced technology builds, stated that protecting client and employee data remains a top priority and that it is enhancing security measures in response to the incident. The company has not commented on Payouts King’s claims, citing its policy against engaging with criminal organizations. The breach has drawn attention to the growing targeting of construction firms by cybercriminals, particularly those handling sensitive government and military contracts. Legal tracking platforms, including ClaimDEPOT, have noted potential class-action lawsuits stemming from the incident.

The California Office of the Attorney General reported on March 7, 2016, that Turner Construction Company experienced a data breach on March 2, 2016, involving the unauthorized disclosure of personally identifiable information, including names and Social Security numbers. The number of affected individuals is currently unknown, and while certain personal information was disclosed, no financial account information or addresses were included.