Mario Susi & Son Inc. Discloses June 2026 Ransomware Attack Impacting 175 Massachusetts Residents
Mario Susi & Son Inc., a family-owned construction and excavating company based in Dorchester, Massachusetts, reported a ransomware attack that compromised the personal data of 175 state residents. The breach occurred on or around June 13, 2026, though the company did not disclose how the attack was executed or which threat actor was responsible.
Exposed information included full names, Social Security numbers, dates of birth, addresses, email addresses, driver’s licenses, government-issued IDs, financial account details, pay stubs, W-2 forms, and other payroll-related documents.
Notification letters were sent to affected individuals beginning July 1, 2026. In response, the company is providing 24 months of free credit monitoring and identity theft insurance through IDX. Enrollment requires affected parties to email hr@msusi.com with their full name and preferred email address for IDX activation. The process involves two emails from IDX one with activation instructions and another confirming enrollment.
The notification also included guidance on placing a free security freeze with the three major credit bureaus. Questions regarding the breach can be directed to hr@msusi.com.
Source: https://www.claimdepot.com/data-breach/mario-susi-son-2026
M Susi & Son Inc. cybersecurity rating report: https://www.rankiteo.com/company/m-susi-&-son-inc-
"id": "M-S1784140727",
"linkid": "m-susi-&-son-inc-",
"type": "Ransomware",
"date": "6/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '175',
'industry': 'Construction and Excavating',
'location': 'Dorchester, Massachusetts, USA',
'name': 'Mario Susi & Son Inc.',
'type': 'Company'}],
'customer_advisories': 'Guidance on placing a free security freeze with the '
'three major credit bureaus; enrollment instructions '
'for credit monitoring via IDX',
'data_breach': {'number_of_records_exposed': '175',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Social Security numbers',
'Dates of birth',
'Addresses',
'Email addresses',
'Driver’s licenses',
'Government-issued IDs',
'Financial account details',
'Pay stubs',
'W-2 forms',
'Other payroll-related '
'documents']},
'date_detected': '2026-06-13',
'date_publicly_disclosed': '2026-07-01',
'description': 'Mario Susi & Son Inc., a family-owned construction and '
'excavating company based in Dorchester, Massachusetts, '
'reported a ransomware attack that compromised the personal '
'data of 175 state residents.',
'impact': {'data_compromised': 'Personal data of 175 Massachusetts residents',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'references': [{'source': 'Cyber Incident Description'}],
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals',
'third_party_assistance': 'IDX (credit monitoring and identity '
'theft insurance)'},
'title': 'Mario Susi & Son Inc. Ransomware Attack',
'type': 'Ransomware'}