NCCER Faces Cybercrime: Personal Data Breach Investigation Details

National Center for Construction Education and Research Cybercrime Incident

The National Center for Construction Education and Research, known as NCCER, recently reported a serious cybersecurity incident that resulted in the unauthorized acquisition of sensitive personal data. This incident was detected on March 21, 2025, when NCCER noticed unusual activity on its network.

In response, the organization proactively took steps to secure its systems by shutting down affected operations to prevent further access or data loss. They engaged cybersecurity experts to investigate the breach and evaluate the damage. Following the initial assessment, it was confirmed that unauthorized files had been removed from the NCCER network.

The investigation further revealed that the accessed files contained various types of personal information. NCCER undertook a thorough review process, which was completed by April 12, 2026, to determine the extent and nature of the compromised data. The reviewed files indicated they included sensitive information, potentially including individuals' Social Security numbers, driver’s license or state ID numbers, and account credentials such as usernames and passwords.

As of this update, NCCER has found no evidence suggesting that the compromised personal information has been misused for fraudulent activities or identity theft. Despite this encouraging finding, the organization took the responsible step of notifying individuals whose data may have been affected, starting from April 27, 2026. Notifications to Louisiana residents, specifically, were sent out via First-Class U.S. mail on several dates throughout early May.

Recognizing the serious nature of the situation, NCCER also offered complimentary credit monitoring and identity protection services to individuals whose Social Security numbers were involved in the breach, aiming to assist them in mitigating any potential risks.

In light of the cybercrime, NCCER has committed to enhancing its cybersecurity measures to protect the sensitive information it oversees.

This incident highlights a growing trend of cyber threats facing organizations and the importance of robust cybersecurity protocols. As cyberattacks become increasingly sophisticated, it is crucial for organizations like NCCER to continuously evaluate and enhance their security frameworks to safeguard personal data against such incidents.

For media inquiries regarding this incident, individuals may reach out to Daniel Marvin, Ashley Pusey, or Helen Tang through the contact information provided in the official notice.