Turner Construction Data Breach Impacts Thousands: SSNs Exposed

Turner Construction Co., a large U.S.-based construction services firm headquartered in New York City, disclosed a cybersecurity incident involving unauthorized access to company systems.

Between July 2 and July 15, 2026, unauthorized access to certain Turner's systems occurred. An investigation into the incident confirmed on July 27, 2026, that files containing personal information had been accessed without authorization.

Payouts King, a ransomware group, first posted about an unidentified victim on July 24, 2026. On Aug. 11, 2026, Payouts King revealed the company's full identity on a Tor network site and claimed to have obtained 27.2 terabytes of data from the organization.

The Payouts King group claimed the stolen data went beyond personal information. According to the group's dark web posting, the compromised data also included engineering documents containing restricted and ITAR-protected information, employee personal data, military project files, legal and litigation records, correspondence, financial records, contracts, NDAs and agreements.

The types of personal information confirmed by the company to have been exposed in the breach included names, Social Security numbers (for individuals in the United States), Social Insurance Numbers (for individuals in Canada), dates of birth, salary information, bank account information used for direct deposit and home addresses and passport numbers.

The breach has impacted 6,098 California residents, according to the California Attorney General disclosure filed on Aug. 18, 2026. Turner began sending written notices to affected individuals on or about the same date.

Turner's response to the breach

Turner Construction Co. is offering affected individuals identity protection services at no cost for five years through two providers, IDShield and IDX.

Individuals must enroll to access these benefits, and the enrollment deadline is Nov. 18, 2026.

For questions about the incident, affected individuals can contact the Turner Identity Protection Response Team at 1-866-688-9340 or by email at TurnerIdentityProtection@tcco.com. A call center is also available at 1-866-200-0984, Monday through Friday from 9 a.m. to 9 p.m. ET.

For questions about IDShield enrollment or services, individuals can call 888-807-0407 or email membersupport@legalshieldcorp.com.

Affected individuals may also write to Turner Construction Co. at 66 Hudson Blvd. East, New York, NY 10001.