Mario Susi & Son Inc., a family-owned construction and excavating company based in Dorchester, Massachusetts, has disclosed a ransomware attack that may have exposed sensitive personal and financial information belonging to employees and other individuals connected with the company. The incident affected at least 175 Massachusetts residents and involved highly sensitive information, including Social Security numbers, government identification documents, and payroll-related records.
Mario Susi & Son began sending notification letters to affected individuals on July 1, 2026 and is offering 24 months of complimentary credit monitoring and identity theft protection services through IDX.
Mario Susi & Son Inc. Data Breach Investigation
According to the company’s notification, Mario Susi & Son Inc. experienced a ransomware attack on or about June 13, 2026. The company has not publicly disclosed additional details regarding how the ransomware attack occurred, whether a specific threat actor was responsible, or the exact method used to gain access to its systems.
Following the incident, Mario Susi & Son investigated the scope of the attack and determined that certain personal information may have been accessed or compromised. The company identified potentially affected individuals and began providing notice as required.
The exposed information appears to include sensitive employee and payroll-related data. Because the information involved may include Social Security numbers, identification documents, and financial information, affected individuals may face increased risks of identity theft, tax fraud, financial fraud, and other forms of misuse.
Ransomware attacks targeting organizations with employee records can create significant concerns because payroll files often contain some of the most sensitive personal information maintained by a company.
When Did This Breach Occur?
The Mario Susi & Son Inc. data breach occurred on or about June 13, 2026, when the company experienced a ransomware attack.
The company began notifying affected individuals on July 1, 2026.
Additional details regarding when the attack was discovered, how unauthorized access occurred, and the full scope of the incident have not been publicly disclosed.
What Information Was Breached?
The information potentially exposed in the Mario Susi & Son Inc. data breach may include:
- Full names
- Social Security numbers
- Social Security cards
- Dates of birth
- Addresses
- Email addresses
- Driver’s licenses
- Government-issued identification cards
- Financial account information
- Pay stubs
- W-2 forms
- Proof of current address
- Other payroll-related information
The exact information involved may vary depending on the individual.
Because the breach may have involved Social Security numbers and financial information, affected individuals should take precautions to protect their identity and monitor for suspicious activity.
What You Can Do
If you received a notice regarding the Mario Susi & Son Inc. data breach, consider taking the following steps:
- Enroll in identity monitoring: Mario Susi & Son is offering 24 months of free credit monitoring and identity theft insurance through IDX.
- Monitor financial accounts: Review bank accounts, credit cards, and other financial records for unauthorized activity.
- Review credit reports: Check credit reports from Equifax, Experian, and TransUnion for unfamiliar accounts or inquiries.
- Consider a credit freeze: A security freeze can help prevent unauthorized accounts from being opened using your personal information.
- Monitor tax records: Watch for suspicious tax filings, IRS notices, or other signs of tax-related identity theft.
- Be cautious of phishing attempts: Criminals may use stolen personal information to create convincing scams.
- Keep breach communications: Save any notification letters and enrollment information provided by Mario Susi & Son.
- Document suspicious activity: Maintain records of unauthorized transactions, identity theft concerns, or expenses related to protecting your information.
Affected individuals enrolling in IDX services should follow the instructions provided in their notification letter, including watching for emails with the subject lines “Your Identity Protection Coverage Is Ready to Activate” and “IDX Protection Status – Review your Monitoring Activation.”
File a Data Breach Lawsuit Against Mario Susi & Son Inc.
Companies that collect, store, and maintain employee and customer information have a responsibility to protect that data with appropriate cybersecurity safeguards. When a ransomware attack exposes sensitive personal information, affected individuals may face privacy concerns, financial risks, and the burden of monitoring their identity.
If your information was exposed in the Mario Susi & Son Inc. data breach, you may have legal options. A class action lawsuit may allow affected individuals to seek compensation for damages related to identity theft risks, financial losses, privacy violations, and costs associated with responding to the breach.
By joining together with others impacted by the same cybersecurity incident, individuals may be able to hold organizations accountable and encourage stronger protections for sensitive personal information.
Contact Class Action U to connect with experienced data breach lawyers. If you received a notice or believe your information may have been affected, fill out our secure form to learn more. There is no cost and no obligation to speak with a legal partner.
