RKA Consulting Group notified the California Attorney General of a data security incident. On January 8, 2025, the company discovered suspicious activity and disconnected affected systems. An investigation determined that an unauthorized individual gained access to systems for a limited period. The incident potentially impacted names, dates of birth, and Social Security numbers of individuals who worked with RKA Consulting on engineering projects. The company engaged forensic experts, changed passwords, implemented network access restrictions, and is providing 12 months of credit monitoring and fraud assistance services via Cyberscout.