Back Thenewstribune

Ex-employee sues Springfield business over data breach affecting 2,667

Thenewstribune • September 29, 2026

A former employee of Springfield-based Hamilton Construction Co. filed a class-action lawsuit Sept. 23 over a data breach exposing personally identifiable information and impacting 2,667 Oregonians.

Plaintiff Scott Jenkins, a Veneta resident and former employee at Hamilton, received notice of a data breach from the construction company on Nov. 12, 2025. The letter said his name and Social Security number were compromised in the breach, according to the complaint filed in Lane County Circuit Court.

The complaint said the data breach occurred around June 19, 2025, but Hamilton waited 146 days, until mid-November, to notify victims. Oregon law requires businesses to notify victims within 45 days of discovering a security breach.

According to the complaint, Hamilton reported the breach to the Oregon Department of Justice on Dec. 15, 2025 - 179 days after the breach occurred.

Jenkins alleges Hamilton failed to monitor its networks that housed private information and failed to properly encrypt that data, placing plaintiffs at risk of harm for having their private information compromised.

Jenkins asks the court to certify the case as class action, instruct Hamilton to purchase or provide funds for lifetime credit monitoring and identity theft insurance to victims and appropriate monetary relief. Jenkins has demanded a trial by jury.

Hannarose McGuinness is The Register-Guard's growth and development reporter. You can reach her at [email protected].

This article originally appeared on Register-Guard: Ex-employee sues Springfield business over data breach affecting 2,667

Reporting by Hannarose McGuinness, Eugene Register-Guard / Register-Guard

USA TODAY Network via Reuters Connect

This story was originally published September 29, 2026 at 4:03 AM .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Lawsuit Filed Over Data Breach at Springfield Construction Company A former employee of Hamilton Construction Co. has filed a class-action lawsuit alleging negligence in a data breach that exposed personally identifiable information of 2,667 individuals. The breach reportedly occurred on June 19, 2025, but the company did not notify affected individuals until November 12, 2025, which is 146 days later, violating Oregon law that mandates notification within 45 days. The lawsuit claims that the company failed to properly safeguard sensitive data, including Social Security numbers and financial information. Scott Jenkins, the plaintiff, is seeking certification for the class action and demands that the company provide lifetime credit monitoring and identity theft insurance for the victims. Legal experts note a rising trend of employees suing companies for data breaches, emphasizing the duty of care employers have to protect employee data. The company reported the breach to the Oregon Department of Justice on December 15, 2025, 179 days after the incident. 2 sources 36

Extracted Entities

Ex-employee sues Springfield business over data breach affecting 2,667

The full story

Extracted Entities

Attack Types (1)

Domains (1)

Email Addresses (1)