Hamilton Construction Faces Class-Action Lawsuit Over Oregon Data Breach
A former employee filed a class-action lawsuit on September 23, against Springfield-based Hamilton Construction Co. over a data breach that exposed personally identifiable information affecting 2,667 Oregonians. The complaint, filed in Lane County Circuit Court, alleges the company failed to properly secure network data and delayed notifying victims for roughly 146 days.
Lawsuit Details and Compromised Information
Plaintiff Scott Jenkins, a resident of Veneta and former employee at Hamilton Construction Co., received an official notice of a data breach from the company on November 12, 2025. According to court filings, the breach itself occurred around June 19, 2025. The notification letter confirmed that Jenkins’s name and Social Security number were among the personal details compromised during the security incident.
Jenkins alleges in the complaint that Hamilton Construction Co. failed to adequately monitor the networks housing private employee files and neglected to properly encrypt sensitive data. This alleged failure placed all impacted individuals at an immediate and ongoing risk of identity theft and fraud.
Timeline of Notification and State Reporting
State statutes in Oregon mandate that commercial enterprises notify affected victims within 45 days of discovering a security breach. Court records show that Hamilton waited approximately 146 days after the mid-June incident before dispatching notification letters to victims in November 2025.
The complaint also states that Hamilton formally reported the security breach to the Oregon Department of Justice on December 15, 2025. This state filing occurred 179 days after the initial data exposure took place.
Legal Demands and Proposed Class Action
Through the class-action filing, Jenkins asks the Lane County Circuit Court to officially certify the case on behalf of all affected individuals. The lawsuit demands that Hamilton Construction Co. purchase or fund lifetime credit monitoring services and identity theft insurance for every impacted victim.
In addition to credit protection measures, the plaintiff seeks appropriate monetary relief and has formally demanded a trial by jury to resolve the dispute.
Company Background and Impacted Region
Hamilton Construction Co. has operated out of Springfield, Oregon, since its founding in 1939. The firm specializes in heavy civil construction projects, building and maintaining critical infrastructure such as bridges, dams, and highways across the region.
The data breach directly impacts 2,667 individuals across Oregon, creating significant personal security concerns for former workers whose private identification details were left vulnerable.