RKA Consulting Group Data Breach Lawsuit Investigation
RKA Consulting Group has disclosed a data security incident that may have exposed sensitive personal information, including Social Security numbers. Individuals who received a breach notice can explore legal options and no-cost identity-protection resources below.
Free, confidential case evaluation: If you were notified by RKA Consulting Group, submit your details to learn whether you qualify for compensation under state and federal laws.
Download Official Breach Notice (PDF)
Timeline of the RKA Consulting Group Data Breach
- January 8, 2025 — Discovery: Suspicious network activity detected; affected systems taken offline.
- February 25, 2025 — Confirmation: Forensic investigation determined an unauthorized person accessed the company’s systems for a limited period and viewed certain files.
- September 23, 2025 — File Review Complete: Manual analysis identified individuals whose data was contained in the accessed files.
- October 27, 2025 — Notice Issued: Written notifications mailed to impacted California residents and report filed with the California Attorney General.
- Last update: October 30, 2025.
What Information Was Involved?
The company’s review determined the following data points may have been exposed:
- Name
- Date of birth
- Social Security number
How RKA Consulting Group Responded
According to the breach notice, RKA Consulting Group implemented several measures immediately after discovering the incident:
- Disconnected impacted systems from the network.
- Engaged independent computer forensics experts.
- Changed all internal passwords and imposed additional network access restrictions.
- Coordinated with Cyberscout, a TransUnion company, to provide complimentary credit monitoring, credit reports, credit scores and proactive fraud assistance for 12 months.
Recommended Steps for Affected Individuals
The company encourages recipients to take the following actions:
- Enroll in the complimentary Cyberscout credit monitoring service.
- Remain vigilant by reviewing bank, credit-card and other financial statements for unauthorized activity.
- Contact Cyberscout representatives with any questions about protecting personal information.
Company Overview
RKA Consulting Group is a civil engineering firm founded in 1981 and headquartered at 398 Lemon Creek Drive, Suite E, Walnut, California, United States.
- Website: rkagroup.com
- Industry: Civil Engineering
- Estimated employees: 11–50
- Social: LinkedIn
- Year founded: 1981
Frequently Asked Questions
How did the RKA Consulting Group data breach occur?
The forensic investigation found that an unauthorized individual accessed RKA Consulting Group’s network on January 8, 2025 and viewed certain files before the company disconnected affected systems.
What personal data was compromised in the RKA Consulting Group breach?
Names, dates of birth and Social Security numbers were identified as potentially exposed.
Is RKA Consulting Group offering free credit monitoring?
Yes. Impacted individuals are eligible for 12 months of single-bureau credit monitoring, credit reports, credit scores and fraud assistance through Cyberscout.
Can I join a lawsuit over the RKA Consulting Group data breach?
Possibly. Data-breach victims often have rights to statutory damages or reimbursement of out-of-pocket losses. Use the free case evaluation above to learn your legal options.
When were breach notifications sent?
Written notices were mailed and filed with the California Attorney General on October 27, 2025.
How do I contact RKA Consulting Group about this incident?
You can visit the company’s website at rkagroup.com or reach out to the dedicated Cyberscout hotline referenced in your mailed notice.