
David Evans Enterprises Inc, a civil engineering and consulting firm headquartered in Portland, Oregon, disclosed a data breach that affected approximately 8,915 individuals in the United States, including four Maine residents.
The breach was reported to attorneys general in California and Maine on April 10, 2026. The company discovered the breach on March 23, 2026, and began notifying affected individuals by written notice on April 10, 2026.
The breach occurred over a two-day period between Feb. 26, 2026, and Feb. 27, 2026. Nearly a month passed between the breach and its discovery, and the company began sending written notices to affected individuals approximately two and a half weeks after that.
At this time, the specific types of personal information that may have been accessed or exposed during the breach remain undisclosed to the public, besides names.
David Evans Enterprises stated that it is offering affected individuals with 12 months access to credit monitoring and identity protection services at no charge. The company is also providing proactive fraud assistance to help affected individuals with questions or in the event that they become a victim of fraud.
These monitoring and fraud assistance services are being provided through Cyberscout, a TransUnion company that specializes in fraud assistance and remediation services. Enrollment in the services must be completed within 90 days of the date of the letter.
The company also encourages affected individuals to remain vigilant against identity theft and fraud. It advises recipients to review their credit reports and account statements regularly for suspicious activity and to detect errors.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)