Silverado Contractors Data Breach Affects Employee PII

On Dec. 18, 2024, Silverado Contractors, a major demolition and excavation contractor based in California, experienced a significant ransomware attack. The incident was carried out by the LYNX ransomware group, which later claimed responsibility and posted sample screenshots of stolen data on its dark web portal.

Silverado detected technical issues within its internal network on Dec. 30, 2024. An investigation unauthorized access to their network had occurred nearly two weeks earlier. The data breach compromised sensitive personal information belonging to current and former employees, as well as potentially other individuals associated with the company.

The breach resulted in the unauthorized acquisition of sensitive personal information belonging to current and former employees, as well as potentially other individuals associated with the company. Exposed data may have included names, contact information, dates of birth, Social Security numbers, driver's license copies, financial information and health insurance information.

Silverado began notifying affected individuals by mail on Nov. 4, 2025. The cyberattack was disclosed to the California Attorney General on Nov. 5, 2025. The severity of the breach is heightened by the public posting of stolen data samples on the dark web, increasing the risk of identity theft and fraud for those affected.

Silverado Contractors' response

Upon discovering the data breach, Silverado Contractors worked to secure its network and engaged external cybersecurity experts. In addition to required state and federal disclosures, the company is offering impacted individuals 12 free months of IDX credit monitoring services.

If you receive a notice from Silverado about this breach, you may want to:

• Sign up for the free IDX credit monitoring and identity theft protection services, offered by the company.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.