Kahua Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Kahua, Inc. regarding its recent data breach. The Kahua data breach involved sensitive personal information belonging to an undetermined number of individuals.


Kahua is a Georgia-based provider of capital program and construction project management software. Founded in 2009, Kahua offers collaborative construction management solutions that enable leading construction organizations to improve efficiency, lower costs, and reduce project risk throughout the entire lifecycle of their capital programs.2 Today, Kahua has over 7,500 customers and manages more than 300,000 projects and over $150 billion in capital.3 Headquartered in Alpharetta, Georgia, Kahua employs over 50 individuals.


On November 13, 2023, Kahua discovered that it had experienced a data breach in which sensitive personal information in its systems may have been accessed. Through its investigation, Kahua determined that an unauthorized party may have accessed this sensitive information between October 25, 2023, and November 13, 2023. On December 15, 2023, Kahua began notifying individuals whose information may have been impacted. The exact type of personal information potentially exposed has not been made publicly available by Kahua. However, according to state reporting guidelines, “personal information” can include the following types of information:

  • Name
  • Social Security number
  • Driver’s license or government issued ID number (e.g., individual taxpayer ID number, passport number, military ID number)
  • Financial information (e.g., financial account number, credit or debit card number)
  • Password, personal ID number, or other access code for a financial account
  • Unique biometric data
  • Genetic information
  • Medical information (e.g., health records, medical diagnosis/treatment)
  • Health insurance information (e.g., health insurance policy number)

If you received a breach notification letter from Kahua, Inc.:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the Kahua data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Kahua, Inc.:
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: