David Evans Enterprises, Inc., based in Portland, OR, experienced an external system breach between February 26 and February 27, 2026. The company discovered the breach on March 23, 2026. The breach was publicly reported by the California Attorney General, and additional filings were made with the Maine and Indiana Attorney Generals.
Approximately 8,915 individuals were affected by this incident. The exposed data includes names and other personal identifiers. The involvement of SSN, medical data, or financial data has not been explicitly confirmed. David Evans Enterprises provided written notification to affected consumers on April 10, 2026, and offered 12 months of credit and identity monitoring with theft restoration assistance through TransUnion.
Information about data breaches can continue to develop. Additional details, including specific data types exposed, may emerge as investigations proceed.