Builders Mutual Insurance notified 64,761 people of a 2022 network intrusion

Builders Mutual Insurance Company, a Raleigh, North Carolina underwriter that writes workers' compensation and other coverage for the construction industry, reported that an unauthorized party had accessed its computer network. The insurer said it noticed suspicious activity on December 14, 2022 and engaged outside security specialists, who determined the next day that certain files had been copied.

Establishing whose information was in those files took months. In a filing with the Maine Attorney General dated September 29, 2023, Builders Mutual reported that 64,761 people were affected, a group made up of claimants along with current and former employees.

The exposed data included names, Social Security numbers, medical information, health insurance information and workers' compensation information. Notification letters were mailed the same day as the Maine filing, roughly nine months after the intrusion was detected.

Builders Mutual offered those affected 12 months of credit monitoring and provided guidance on placing fraud alerts and security freezes and on obtaining free credit reports. The company said it was adding safeguards and employee training. It did not comment publicly on the incident beyond its regulatory filings. A supplemental notice filed in late December 2023 disclosed that continued investigation had identified further affected individuals, who were sent letters on December 28, 2023.