2026 Turner Construction — Jul 2–15 unauthorized access; ≥13.7K notified (SSNs/bank/salary); Payouts King claim

Verified company notice via California AG filing sb24-628438 — August 18, 2026. Turner Construction Company (major U.S. construction manager) identified unauthorized access to certain systems between July 2 and July 15, 2026 and on July 27 confirmed files containing personal information were accessed. Company-confirmed categories include names, SSNs (U.S.) / SINs (Canada), DOBs, salary, direct-deposit bank details, home addresses, and for some people passport numbers. Turner notified ~6,098 California residents around August 18 and offered five years of IDX/IDShield monitoring. Aggregated state AG disclosures cited by Bisnow/ClaimDepot include CA 6,098 + TX 3,725 + MA 3,643 + NH 286 + VT 38 ≈ 13,790 notified residents (nationwide total may be higher). Construction Dive reported company engagement of forensic experts; ransomware group Payouts King claimed responsibility and alleged ~27.2 TB including engineering and military project files — those actor claims remain unverified beyond Turner’s personal-data notice. recordsAffected 13790 from summed AG disclosures; companyConfirmed true for the intrusion and PII categories.