DBM Global Inc., a construction and steel fabrication company, experienced a significant data breach that affected 20,104 individuals in the United States. The breach was first detected on Nov. 20, 2024, when the company noticed unusual activity disrupting access to certain systems on its network.
A investigation revealed that, on Nov. 12, 2024, an unauthorized actor acquired certain personal information from DBM Global’s systems. On Aug. 4, 2025, it was confirmed that sensitive information was compromised during the data breach. Exposed information included names, addresses, Social Security numbers, and dates of birth.
DBM Global Inc began notifying affected individuals beginning on Dec. 23, 2024 and reported the data breach to the California Attorney General's office on the same day.
The cybersecurity incident was disclosed to the Massachusetts, Maine, Texas and Vermont Attorney Generals' offices beginning on Aug. 11, 2025. The breach is considered severe due to the exposure of Social Security numbers and dates of birth, which could be used for identity theft.
Affected individuals include 2,293 in Texas, 12 in Maine, and three Massachusetts residents.
In addition to required state and federal disclosures, DBM Global is offering free IDX credit monitoring and identity theft protection services to affected individuals. This includes up to 24 months of credit and CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed identity theft recovery services.
To support those affected, DBM Global is offering complimentary credit monitoring and identity theft protection services through IDX, a data breach and recovery services provider. Impacted individuals are eligible for up to The deadline to enroll in these services is March 23, 2025.
If you received a data breach notice from DBM Global, you may want to:
For more information about the company, visit the DBM Global website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.