National Center for Construction Education and Research Discloses 2026 Data Breach
The National Center for Construction Education and Research Ltd. (NCCER) filed a data breach notice with Maine regulators on May 22, 2026. This incident reportedly exposed various personal details including full names, Social Security numbers, and professional training records. This filing serves as an official record of the security compromise.
- State
- Maine
- Reported
- May 22, 2026
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Mailing Address
- Email Address
- Professional Certification and Training Records
- Phone Number
The National Center for Construction Education and Research Ltd. (NCCER), a primary certifying body and training registry for the construction and trades sectors, reported a data security incident to the Maine Attorney General on May 22, 2026. As an organization managing extensive databases for credentialed professionals, instructors, and corporate partners, NCCER collects and retains sensitive personal information.
According to the official filing, the categories of information reported as exposed include Full Name, Social Security Number, Date of Birth, Mailing Address, Email Address, Professional Certification and Training Records, and Phone Number. These personal identifying details were reportedly compromised during the security incident.
The exposure of personal information such as Social Security Numbers and Dates of Birth can place affected individuals at increased risk of identity theft, financial fraud, and targeted phishing attempts. Compromised contact information and professional records might also be exploited in social engineering schemes.
Individuals who receive a breach notification related to this incident should consider taking proactive steps to protect their personal information. This includes regularly monitoring credit reports for any unauthorized activity, carefully reviewing financial statements, and exercising caution regarding unsolicited communications. It is also advisable to create strong, unique passwords for all online accounts and enable multi-factor authentication whenever possible.
This information is based on public filings with state regulators and is presented as part of a neutral registry of U.S. data breaches, aiming to provide factual details to assist individuals in understanding such notifications.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Maine Attorney General filing
Related data breach cases
- Marsicovetere & Levine Law Group, P.C.
- Central Maine Area Agency on Aging DBA Spectrum Generations DBA Maine Pine Catering
- Marsicovetere & Levine Law Group, P.C.
- Landstar System Holdings, Inc.
- Orrstown Bank
- Caldwell Sutter Capital, Inc.
- Central Maine Area Agency on Aging DBA Spectrum Generations DBA Maine Pine Catering
- Maine Health Behavioral Health
- Passco Companies, LLC
- Maine Health Behavioral Health
- Orrstown Bank
- Landstar System Holdings, Inc.
- Passco Companies, LLC
- Caldwell Sutter Capital, Inc.