PCL Constructors, Inc. reported that an unauthorized actor accessed a third-party payroll vendor's database containing personal information of current and former employees. The incident occurred between February 18 and 19, 2020. Affected data included names, addresses, email addresses, phone numbers, pay/withholding information, and Social Security numbers. PCL directed the vendor to remove the data, engaged forensic firms, and offered one year of identity monitoring to affected individuals. No evidence of misuse was found.