David Evans Enterprises Data Breach: 8,915 Individuals Affected

David Evans Enterprises Inc, a civil engineering and consulting firm headquartered in Portland, Oregon, disclosed a data breach that affected approximately 8,915 individuals in the United States, including 2,268 Washington residents.

The breach was reported to attorneys general in California, Indiana, Maine, Massachusetts, Montana, Nebraska, New Hampshire, Oregon, Vermont and Washington starting on April 10, 2026.

The breach occurred over a two-day period between Feb. 26, 2026, and Feb. 27, 2026. The company discovered the incident on March 23, 2026

The company began sending written notices to affected individuals on April 10, 2026.

The specific types of personal information that may have been accessed or exposed during the breach include names, Social Security numbers, driver's licenses, and financial account information.

David Evans Enterprises' response to the breach

David Evans Enterprises is offering affected individuals with 12 months access to credit monitoring and identity protection services at no charge. The company is also providing proactive fraud assistance to help affected individuals with questions or in the event that they become a victim of fraud.

These monitoring and fraud assistance services are being provided through Cyberscout, a TransUnion company that specializes in fraud assistance and remediation services. Enrollment in the services must be completed within 90 days of the date of the letter.

The company also encourages affected individuals to remain vigilant against identity theft and fraud. It advises recipients to review their credit reports and account statements regularly for suspicious activity and to detect errors.