Hamilton Construction Co.

Summary

Hamilton Construction Co. faced a lawsuit alleging negligence after a data breach exposed personal information including Social Security numbers, driver’s license numbers, financial details and dates of birth for over two thousand individuals. The suit claims the company delayed notifying affected people for about five months after discovering unauthorized access, offered only twelve months of credit monitoring, and failed to report the breach to state authorities in a timely manner, leading to claims of inadequate data protection and seeking unspecified damages plus lifetime credit monitoring for victims.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On June 19, 2025, Hamilton Construction Co. experienced unauthorized access to its network, during which certain files were accessed. The company did not disclose the incident externally at that time. On or around November 12, 2025, Hamilton Construction Co. notified Washington state authorities of an egregious data breach. On the same date, the company sent notice letters to affected individuals, a delay of 146 days from the breach date.

The lawsuit alleges that the accessed data included names, Social Security numbers, driver’s license numbers, financial information and full dates of birth. According to Oregon’s data breach database, the breach affected 2,667 people. The notice letter provided recipients with an offer of twelve months of credit monitoring services. The plaintiffs contend that this monitoring period is insufficient given the lifelong risk of identity theft and related fraud.

Hamilton Construction Co. reported the breach to the Oregon Department of Justice on December 15, 2025. The former employee Scott Jenkins filed a lawsuit on September 24, 2026, seeking class action status and alleging negligence in safeguarding private information and delayed notification. The complaint claims breach of an implied contract and requests unspecified damages plus lifetime credit monitoring for all class members. The company, founded in 1939, is said to have an estimated annual revenue of sixty million dollars.

Sources

Sources available to members: 1 source.