If you've had past dealings with Tocci Building Corporation, a construction management firm based in New England, it's important to be aware of a recent data breach that may affect your personal information. On February 29, 2024, Tocci discovered unauthorized access to their systems which may have compromised sensitive data from the period 2010-2015.
What Happened
The breach was detected by Tocci's cybersecurity team, and immediate action was taken to contain the incident. An external cybersecurity firm was engaged to ascertain the scope and impact, revealing that personal information used for compensation and benefits might have been accessed.
What Information Was Involved
The data potentially exposed includes names, addresses, personal email addresses, telephone numbers, and Social Security numbers. This type of information can be used for identity theft and fraud, so it's crucial to take protective measures if you believe you might be affected.
What Tocci Is Doing
Tocci has reported the breach to law enforcement and is cooperating with authorities. They have also initiated a comprehensive review of their security systems to prevent future incidents. To support those impacted, Tocci is offering to cover the cost of an 18-month credit monitoring service, which includes features like daily credit monitoring, dark web surveillance, insurance reimbursement, and identity theft recovery services.
What You Can Do
Additional Resources
For further assistance and to learn more about protecting yourself from identity theft, you can contact the Federal Trade Commission (FTC) at +1 (877) 438-4338 or visit their website at IdentityTheft.gov.
Contact Information
For more details or assistance regarding the credit monitoring services, please reach out to Paul Neenan, CFO of Tocci, at pneenan@tocci.com or by phone at 781-218-5630.
For the full disclosure of the data breach, you can visit the Massachusetts Attorney General's website.
By taking the steps outlined above, you can help safeguard your personal information and mitigate the potential impact of this data breach. Remember, staying informed and proactive is the best defense against identity theft.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.