A Springfield data-breach lawsuit puts 2,667 people back on alert

A former Hamilton Construction employee has sued the Springfield company over a 2025 data breach, asking a Lane County judge to certify a class action. The complaint alleges negligence, breach of implied contract and an unreasonable delay in notifying current and former employees whose records were accessed.

The allegations are not findings. According to the complaint, unauthorized access occurred June 19, 2025, and notice letters went out November 12 — 146 days later. The lawsuit says exposed files included names, Social Security numbers, driver's-license numbers, financial information and full birth dates. Oregon's public breach database lists 2,667 people affected.

Hamilton offered 12 months of credit monitoring, the complaint says. The plaintiff is seeking damages and lifetime monitoring for any class a judge ultimately approves. For people who received a breach notice, the practical part has not changed: keep the letter, use the monitoring that was offered, watch financial accounts and use the Federal Trade Commission's IdentityTheft.gov plan if suspicious activity appears.