By Gregory Hale
Frisco, Texas-based engineering firm Lamb-Star Engineering, LLC, suffered a cyberattack in January and is now letting victim know their personally identifiable information ended up stolen in the hack.
“On or about January 20, 2026, Lamb-Star detected suspicious activity on its system,” the company said in a notice to victims. “Upon discovery of this incident, Lamb-Star immediately disconnected the affected systems and remote access to the network.”
The company then hired a specialized third-party cybersecurity firm and IT personnel to assist with securing the environment, as well as to conduct a comprehensive forensic investigation to determine the nature and scope of the incident.
Based on these findings, Lamb-Star began reviewing the affected files to identify the specific individuals and the types of information compromised. Indeed, this process was necessary to provide accurate information and notice to potentially impacted individuals. Lamb-Star completed its list of individuals to notify on April 29.
Data privacy and security are among Lamb-Star’s highest priorities, and the company said it remains committed to doing everything it can to protect the privacy and security of personal information in its care.
Steps to Investigate
Upon discovery of the incident, Lamb-Star moved quickly to investigate, respond, and assess the security of its systems with the assistance of outside experts. Specifically, Lamb-Star promptly engaged a specialized third-party cybersecurity firm and IT personnel to assist with securing the environment, as well as to conduct a comprehensive forensic investigation to determine the nature and scope of the incident.
Furthermore, Lamb-Star took additional technical and administrative steps to further enhance the security of its systems and customer data to mitigate the risk of future harm.
Specifically, Lamb-Star fully rebuilt all servers, patched identified and unidentified vulnerabilities, applied necessary security updates, strengthened access control systems, implemented enhanced monitoring and detection methods, reset all user and service account passwords, initiated new password managers, updated and implemented new security policies, updated and enhanced backup policies and infrastructure, enhanced backup methods, timelines, and repositories, enhanced user cybersecurity training and attack simulations.
Meanwhile, Lamb-Star has no knowledge of any instances of identity theft or fraud resulting from this incident.
Lamb-Star is a Native American-owned civil engineering firm. Furthermore, Lamb-Star serves numerous state departments of transportation, regional toll authorities, municipal governments, and contractors and developers.
No further information was immediately available on who was behind the attack and what kind of attack it was.
For more information on other incidents in the industry click on ICSSTRIVE.com.