







Rogers Mechanical Contractors, a Georgia-based commercial and industrial mechanical contractor, experienced a major data breach which exposed both personally identifiable information (PII) and protected health information (PHI). An investigation determined that a threat actor accessed internal systems and may have acquired sensitive data on or around Jan. 31, 2025.
A review of the compromised data was completed on July 21, 2025. Information exposed in the cyberattack included names, addresses, dates of birth, Social Security numbers, government ID numbers, medical information, health insurance information, financial account information and credit card or debit card numbers. The total number of impacted individuals has not been released, but is believed to include current and former employees, contractors and clients.
Rogers Mechanical Contractors began notifying affected individuals by mail on Oct. 2, 2025. The breach was also disclosed to multiple state authorities, including the Massachusetts, Texas and Vermont Attorney Generals' offices.
The combination of Social Security numbers, medical and financial information compromised in the cybersecurity incident puts current and former employees at a major risk for identity theft along with medical or financial fraud.
In response to the breach, Rogers Mechanical Contractors secured its systems and launched an investigation with the help of cybersecurity experts. In addition to required state and federal disclosures, the company is offering free IDX credit monitoring and identity protection services to affected individuals.
If you receive a notice from Rogers Mechanical Contractors about this breach, you may want to:
The company has also set up a dedicated assistance line for questions at 1-833-788-9712, available Monday through Friday from 9 a.m. to 9 p.m. Eastern time.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)