CRC Companies Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating CRC Companies, LLC regarding its recent data breach. The CRC Companies data breach involved sensitive personal identifiable information belonging to an undetermined number of individuals.


CRC Companies is comprised of real estate, construction, and asset management firms. As a collection of firms, CRC Companies offers a variety of services including entitlement services, product development, construction, asset management, P3 and infrastructure services, and energy solutions. Headquartered in Arlington, Virginia, CRC Companies employs approximately 50 individuals.


Recently, CRC Companies discovered that it had experienced a data breach in which the sensitive personal identifiable information in its systems may have been accessed. Through its investigation, CRC Companies determined that an unauthorized actor may have accessed this sensitive information on January 6, 2023. On March 27, 2023, CRC Companies began contacting individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number
  • Address
  • Bank account numbers

If you received a breach notification letter from CRC Companies:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the CRC Companies data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by CRC Companies;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: