David Evans Enterprises Inc.: David Evans Enterprises Data Breach: 8,915 Affected

David Evans Enterprises Data Breach Exposes Nearly 9,000 Individuals

David Evans Enterprises Inc., a Portland, Oregon-based civil engineering and consulting firm, disclosed a data breach affecting 8,915 individuals across the U.S., including four Maine residents. The incident was reported to attorneys general in California and Maine on April 10, 2026, after the company discovered the breach on March 23, 2026.

The breach occurred over a two-day period (February 26–27, 2026), with nearly a month passing before detection. Affected individuals began receiving written notifications on April 10, 2026, roughly two and a half weeks after the discovery.

While the company has not publicly disclosed the full scope of exposed data, names were confirmed as part of the compromised information.

In response, David Evans Enterprises is offering 12 months of free credit monitoring and identity protection services through Cyberscout (a TransUnion company), along with proactive fraud assistance. Affected individuals must enroll within 90 days of receiving their notification letter. The company has not provided further details on the breach’s cause or additional compromised data types.

Source: https://www.claimdepot.com/data-breach/david-evans-enterprises-2026

David Enterprises Inc. cybersecurity rating report: https://www.rankiteo.com/company/david-enterprises-inc

"id": "DAV1776105285",
"linkid": "david-enterprises-inc",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '8915',
                        'industry': 'Engineering/Consulting',
                        'location': 'Portland, Oregon, USA',
                        'name': 'David Evans Enterprises Inc.',
                        'type': 'Civil Engineering and Consulting Firm'}],
 'customer_advisories': '12 months of free credit monitoring and identity '
                        'protection services through Cyberscout; enrollment '
                        'required within 90 days of notification.',
 'data_breach': {'number_of_records_exposed': '8915',
                 'personally_identifiable_information': 'Names',
                 'sensitivity_of_data': 'Moderate (Names confirmed, other data '
                                        'types undisclosed)',
                 'type_of_data_compromised': 'Personally Identifiable '
                                             'Information (PII)'},
 'date_detected': '2026-03-23',
 'date_publicly_disclosed': '2026-04-10',
 'description': 'David Evans Enterprises Inc., a Portland, Oregon-based civil '
                'engineering and consulting firm, disclosed a data breach '
                'affecting 8,915 individuals across the U.S., including four '
                'Maine residents. The breach occurred over a two-day period '
                '(February 26–27, 2026) and was discovered on March 23, 2026. '
                'Affected individuals began receiving notifications on April '
                '10, 2026. Names were confirmed as part of the compromised '
                'information.',
 'impact': {'data_compromised': 'Names',
            'identity_theft_risk': 'High (due to credit monitoring offer)'},
 'investigation_status': 'Ongoing',
 'references': [{'source': 'Company Disclosure'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to attorneys '
                                                       'general in California '
                                                       'and Maine'},
 'response': {'communication_strategy': 'Written notifications to affected '
                                        'individuals',
              'third_party_assistance': 'Cyberscout (TransUnion)'},
 'title': 'David Evans Enterprises Data Breach Exposes Nearly 9,000 '
          'Individuals',
 'type': 'Data Breach'}