Turner Construction Data Breach

Turner Construction says hackers were inside its systems for nearly two weeks in July. The exposed data includes Social Security numbers, bank account information, and passport numbers, one of the most complete personal-data sets seen in a recent employer breach.

Turner Construction Company, one of the largest construction management firms in North America, has notified current and former employees and contractors of a data breach involving highly sensitive personal information. Turner says an unauthorized party accessed its systems between July 2 and July 15, 2026, and that it confirmed on July 27, 2026 that files containing personal information had been accessed. Turner reported the incident to the California Attorney General on August 18, 2026 and began notifying approximately 6,098 California residents around that same date.

Source: California Attorney General data-breach notification list (reported 08/18/2026); Turner Construction Company’s own Notice of Privacy Incident.

A Wide-Reaching, Multi-Category Data Set

Turner operates nationally and has Canadian personnel, and the breach reflects that reach. The exposed information includes Social Security numbers for U.S. personnel and Social Insurance Numbers for Canadian personnel, along with dates of birth, salary information, bank account details used for direct deposit, and home addresses. A limited subset of individuals also had their passport numbers exposed. Turner has not disclosed the total number of people affected nationwide; the 6,098 figure reflects California residents only.

What Information Was Exposed?

According to Turner’s notice, the information involved included:

• Names
• Social Security numbers (U.S. personnel)
• Social Insurance Numbers (Canadian personnel)
• Dates of birth
• Salary information
• Bank account information
• Home addresses
• Passport numbers (limited subset of individuals)

How Many People Are Affected?

Turner notified approximately 6,098 California residents on or about August 18, 2026. Turner has not disclosed a nationwide total; as a national employer with Canadian operations, the full affected population is plausibly much larger than the California figure alone, but no broader number has been made public.

What Is Turner Construction Offering Affected Individuals?

Turner is offering five years of complimentary credit monitoring through IDX and IDShield, depending on the version of the notice a recipient received. The IDX offering includes credit monitoring, CyberScan dark-web monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity-theft recovery services; recipients can enroll at app.idx.us/account-creation/protect or by calling 1-866-200-0984 (Monday-Friday, 9 a.m. to 9 p.m. ET), with an enrollment deadline of November 18, 2026. The IDShield version directs recipients to enroll at access.legalshield.com or contact IDShield at 888-807-0407 or [email protected]. General questions about the incident can be directed to Turner’s Identity Protection Response Team at 1-866-688-9340 or [email protected].

Your Information Is at Risk

This is an unusually complete personal-data set for an employer breach. A Social Security number paired with a date of birth, home address, and bank account information gives criminals nearly everything needed to open new credit, redirect a paycheck, or file a fraudulent tax return. For the smaller group whose passport numbers were exposed, the risk extends to identity fraud involving international travel documents. Affected individuals should watch bank and payroll accounts closely for unauthorized changes, monitor credit reports, and enroll in the monitoring Turner is offering.

Do You Have Legal Options?

Employers that collect Social Security numbers, bank account information, and other sensitive personal data have a legal duty to secure that data and to notify affected individuals without unreasonable delay.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review if you received a Notice of Privacy Incident from Turner Construction.

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that manage healthcare data are legally required to safeguard this information. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Residents of California may be entitled to additional protections under the California Consumer Privacy Act (CCPA), which provides enhanced rights regarding the collection, use, and safeguarding of personal information.

FAQ

Who is affected by the Turner Construction data breach?

Current and former Turner Construction employees and contractors, including personnel in Canada. Turner has confirmed approximately 6,098 affected California residents; a nationwide total has not been disclosed.

What information was exposed?

Names, Social Security numbers (or Social Insurance Numbers for Canadian personnel), dates of birth, salary information, bank account information, home addresses, and, for a limited subset of individuals, passport numbers.

When did the breach happen?

Turner says unauthorized access occurred between July 2 and July 15, 2026, and that it confirmed on July 27, 2026 that files containing personal information had been accessed. Notice went out on or about August 18, 2026.

Is Turner Construction offering credit monitoring?

Yes. Turner is offering five years of complimentary credit monitoring through IDX or IDShield, depending on the notice version received, including identity-theft insurance and recovery support. Enrollment details and deadlines are included in each individual’s letter.

Has my information actually been misused?

Turner has not reported confirmed instances of identity theft or fraud resulting from this incident. That does not mean the underlying exposure didn’t happen, only that no confirmed misuse has been made public yet.

Do I have a legal claim?

Employers that collect and store Social Security numbers, banking details, and other sensitive personal information have a legal duty to secure that data and to notify affected individuals without unreasonable delay. If you received a Notice of Privacy Incident from Turner Construction, contact the Data Breach Attorneys at Emery | Reddy at 206.207.8929 or www.emeryreddy.com for a Free Case Review. No Fee Unless We Recover.