What should I do if I received a data breach notification letter?

Monitor your credit reports and financial accounts for suspicious activity. Consider placing a fraud alert or credit freeze with all three major credit bureaus. Be alert to phishing emails or calls referencing the breach. Change passwords on any affected accounts and enable two-factor authentication. Keep a copy of your data breach notification letter for your records.

AECOM Cybersecurity Incident Class Action Investigation

Q: Am I eligible to join a data breach class action?

If this incident exposed your personal information, you may have legal rights. State and federal law provide protections for individuals whose data is compromised through a company's failure to maintain reasonable security. A class action lawsuit may allow you to seek compensation for identity theft, financial losses, and the violation of your privacy. Console & Associates, P.C. is actively reviewing this matter and offers a free, confidential eligibility review.

Incident Details

AECOM Cybersecurity Incident Overview

Company

AECOM

Date of Incident

Not Disclosed

Industry

Professional Services

Data Reportedly Exposed

Not Confirmed

Source

View Source

Reporting Source

Dark Web Listing

Your Legal Rights

You May Be Entitled to Compensation

This incident may have exposed your personal information. If so, you may have legal rights. State and federal law provide protections for individuals whose data is compromised through a company's failure to maintain reasonable security.

A class action lawsuit may allow you to seek compensation for identity theft, financial losses, and the violation of your privacy. Console & Associates, P.C. is actively reviewing this matter.

Submit your information below for a free, confidential eligibility review. There is no cost and no obligation to proceed at any stage of the process.

AECOM was reportedly listed on a dark web leak site by a cybercriminal group, raising concerns that employee information may have been taken. If you believe your personal information may have been exposed in the AECOM cybersecurity incident, our data breach lawyers want to hear from you.

What Happened?

According to a posting on a dark web leak site, a cybercriminal group known as Metaencryptor claimed responsibility for a cybersecurity incident involving AECOM. The claim was reportedly posted in September 2026. The categories of information potentially involved have not been confirmed. AECOM has not publicly confirmed the cybersecurity incident, and its full scope remains under investigation.

If you are an employee who worked at AECOM, you may be entitled to compensation. Fill out the form below to see if you qualify.

Steps To Take If You Were Affected

Monitor your credit reports and financial accounts for suspicious activity
Consider placing a fraud alert or credit freeze with all three major credit bureaus
Be alert to phishing emails or calls referencing the incident
Change passwords on any affected accounts and enable two-factor authentication
Keep any letters or notices you receive about the cybersecurity incident for your records

AECOM Cybersecurity Incident Class Action Investigation

What Happened?

Steps To Take If You Were Affected

Has Your Personal Information Been Exposed?

Submit Your Information for a Free Eligibility Check