The Akira ransomware group claims it stole 60GB of data from Strack Construction, a Minnesota construction contractor, including employee information, client data, financial records, and NDAs. Strack Construction has not publicly confirmed the breach. Anyone connected to the company should monitor credit reports and watch for phishing attempts as a first step.
| Company | Strack Construction |
|---|---|
| Industry | Constructions |
| Data Types Exposed | Employee Personal Information, Project Drawings and Specifications, Detailed Financial Records, Client Information, Non-Disclosure Agreements |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Strack Construction Data Breach?
A ransomware group known as Akira has claimed responsibility for a cyberattack on Strack Construction. According to the group’s own posting, it stole roughly 60 gigabytes of corporate data from the company’s network. This alleged Strack Construction data breach reportedly includes employee records, project drawings, financial details, client information, and signed non-disclosure agreements.
Strack Construction is a family-owned commercial and industrial contractor based in St. Joseph, Minnesota. The company has operated since 1938, offering design-build, general contracting, construction management, and real estate development services. Because of its long history and broad client base, any confirmed data theft could touch a wide range of business partners and workers.
As of this writing, Strack Construction has not publicly confirmed the incident. The claim comes solely from the Akira group’s listing on its extortion site, where it stated an intention to release the stolen files. This means the scope, accuracy, and full extent of the alleged theft remain unverified by the company itself.
Ransomware groups like Akira typically gain access through phishing emails, stolen credentials, or unpatched software vulnerabilities. However, the exact method used against Strack Construction has not been disclosed. Until the company issues its own statement, many important details will stay unclear.
Because no independent forensic report has been published, it is not yet known whether Strack Construction has hired outside cybersecurity investigators. Similarly, there is no public timeline confirming when the intrusion began or how long the attackers had access. As more information becomes available, this article will reflect only what has been formally verified.
Who was affected?
The individuals potentially affected by this incident likely include current and former Strack Construction employees. In addition, the claimed data theft may involve clients and business partners who worked with the company on construction projects. Because the firm handles design-build and real estate development, its client list may include both commercial and government entities.
At this time, the exact number of affected individuals has not been publicly disclosed. Ransomware.live’s summary does not include a specific victim count. As a result, anyone who has worked with or been employed by Strack Construction should stay alert until official notifications, if any, are issued.
Given the nature of construction contracting, some exposed data could involve subcontractors and vendors as well. Meanwhile, project-related documents such as drawings and specifications suggest that business clients, not just individuals, may face exposure. This broadens the potential pool of affected parties beyond typical consumer breaches.
What Information Was Potentially Exposed?
The Akira group’s claim lists several categories of sensitive corporate and personal data. Because this information has not been independently verified by Strack Construction, the following list reflects what the threat actors themselves have stated.
- Employee personal information
- Project drawings and specifications
- Detailed financial records
- Client information
- Non-disclosure agreements (NDAs)
If accurate, this mix of data could create serious risks for both employees and business clients. Employee information often includes details that fraudsters use to open credit accounts or file fraudulent tax returns. In addition, financial records could reveal banking relationships, contract values, or payment details that criminals might exploit.
Client information and NDAs raise a different kind of concern. For example, competitors or bad actors could misuse confidential business terms if these documents are leaked. Similarly, exposed project specifications could compromise ongoing bids or partnerships. Because construction contracts often involve significant financial stakes, this type of exposure could affect business relationships well beyond individual identity theft.
What is the company doing?
Because this incident stems from a claim made by the Akira ransomware group, Strack Construction has not publicly confirmed the breach. Therefore, no official response, investigation update, or notification process has been disclosed at this time.
Consequently, it is not yet known whether the company has engaged forensic investigators or law enforcement. It also remains unclear whether affected individuals will receive direct notification letters or be offered credit monitoring services. As this situation develops, individuals who may have interacted with Strack Construction should watch for official communications directly from the company.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Anyone who has worked for or with Strack Construction should check their credit reports regularly. You can request free reports from all three major credit bureaus through AnnualCreditReport.com. Doing this consistently helps you catch unauthorized activity early.
In addition, look closely for unfamiliar accounts, hard inquiries, or address changes on your report. Because identity thieves often test stolen data with small transactions first, catching these early can prevent larger financial damage. If you notice anything suspicious, report it to the credit bureau immediately.
Consider a Fraud Alert or Credit Freeze
If financial or employee identity information was truly compromised, placing a fraud alert on your credit file is a smart precaution. This step requires lenders to verify your identity before opening new credit in your name. As a result, it becomes much harder for criminals to use stolen data successfully.
For stronger protection, you might also consider a full credit freeze. This restricts access to your credit file entirely until you lift it. Because a freeze is free and reversible, it offers meaningful protection with minimal downside for people worried about identity theft.
Stay Alert for Phishing Attempts
Following any data breach claim, scammers often send phishing emails pretending to be the affected company. Therefore, be cautious of unexpected messages referencing Strack Construction or asking you to click links or share personal details. Legitimate companies rarely ask for sensitive information through email.
Instead, verify any suspicious communication by contacting the company directly through a known phone number or website. This simple habit can prevent you from accidentally handing over more information to attackers. Because phishing tactics constantly evolve, staying skeptical remains one of your best defenses.
Protect Business and Financial Documents
If you are a client, vendor, or partner of Strack Construction, review any shared contracts, NDAs, or financial agreements for potential exposure. Consider notifying your own legal or compliance team if sensitive business terms may have been compromised. This proactive step helps limit downstream risk to your organization.
Furthermore, consult with a data breach attorney if you believe your personal or business information was exposed. An attorney can help you understand your legal options, including whether you may qualify for compensation. Because breach investigations often develop over time, seeking a free case evaluation early can help protect your rights.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.