A 2025 cyberattack on National Center for Construction Education and Research Ltd. exposed names and Social Security numbers. If you received a notice, here's what it means — and what you can do.
Per the company's filing — only the items below were involved. We don't pad the list.
Of all the data types that get exposed in a breach, the combination of a full name and Social Security number is among the most damaging. Unlike a credit card number, which a bank can cancel and reissue in a day, your SSN is effectively permanent — you can't change it without an arduous government process, and even then your old number doesn't disappear.
With a name and SSN, someone can attempt to open credit lines in your name, file a fraudulent tax return to claim your refund, apply for government benefits, or pass an employment background check as you. These harms can surface months or years after the breach, which is part of why courts increasingly take SSN exposure seriously even before any misuse is proven.
Notably, the filing indicates the breach occurred in March 2025 but affected individuals weren't notified until roughly May 2026 — a gap of 13 months — a gap during which the exposed data could have circulated.
Regardless of any legal action, if you received a notice there are protective steps worth taking:
Hosted copy of the notice filed with the Maine Attorney General (original PDF on maine.gov).
A class action investigation is underway. If you received a notice, you may be eligible to join. Find out in two minutes — there's no cost and no obligation.
An investigation into a potential class action is underway. Whether a suit is ultimately filed depends on the facts and on counsel's assessment. Signing up registers your interest and lets attorneys evaluate eligibility — it is not itself a lawsuit.
Class action representation in cases like this is typically handled on a contingency basis, meaning no upfront cost to you. Always confirm terms directly with the representing attorneys.
If you received a notification letter from National Center for Construction Education and Research Ltd., you were among those identified as affected. If you're unsure, the letter is the definitive indicator.