Conway-Phillips Holding LLC dba Phillips Tank and Structure data breach

What we know

Conway-Phillips Holding LLC, operating under the well-known trade name Phillips Tank and Structure, occupies a critical niche in industrial infrastructure, engineering, and heavy construction. Specializing in the design, fabrication, and erection of large-scale storage tanks and structural steel systems for the energy, petrochemical, and municipal sectors, the company manages complex, high-stakes supply chains and workforce logistics. To support its extensive operations, engineering projects, and specialized labor force, Conway-Phillips Holding LLC routinely collects, processes, and stores vast quantities of sensitive information. This repository includes comprehensive personnel records, extensive payroll and tax files, direct deposit banking details, subcontractor credentials, and proprietary engineering designs, making the organization a substantial custodian of high-value corporate and personal data. In 2025, Conway-Phillips Holding LLC dba Phillips Tank and Structure reported a significant data security incident to the Nebraska Attorney General. While the full mechanics of the intrusion continue to be investigated, security incidents affecting heavy industrial contractors and engineering firms typically involve sophisticated cyberattacks such as ransomware deployments, unauthorized entry into corporate network environments, or compromised third-party vendor platforms. Because heavy industrial operations rely heavily on interconnected operational technology and corporate administrative networks, a breach at this level can easily penetrate administrative databases where employee, contractor, and corporate compliance records are centralized, bypassing perimeter defenses undetected for extended periods. The data compromised during the Conway-Phillips Holding LLC incident exposes affected individuals to severe, long-term risks. Because the compromised files likely include full legal names, Social Security numbers, dates of birth, detailed wage and compensation records, tax documentation, and banking details, victims face an immediate and elevated danger of identity theft and financial fraud. The exposure of Social Security numbers and tax data enables malicious actors to fraudulently file tax returns, open unauthorized credit lines, or execute account takeovers. Furthermore, the inclusion of direct deposit and banking information leaves victims vulnerable to unauthorized withdrawals and financial manipulation, requiring constant vigilance and credit monitoring to mitigate ongoing threats. As an entity handling sensitive personal and financial data for its workforce and partners, Conway-Phillips Holding LLC dba Phillips Tank and Structure had clear legal obligations under state and federal data protection standards, including the Nebraska Consumer Protection Act and general common-law duties of care. These legal frameworks mandate that companies implement robust administrative, technical, and physical safeguards—such as multi-factor authentication, network segmentation, robust encryption, and continuous monitoring—to protect private information from unauthorized access. The occurrence of this breach strongly indicates potential failures in these security protocols, suggesting that the company may have fallen short of its legal duty to maintain adequate defenses against foreseeable cyber threats. Receiving a data action notification letter from Conway-Phillips Holding LLC dba Phillips Tank and Structure is a formal admission that your private information was compromised due to inadequate corporate security measures. Legally, the receipt of this notice establishes the standing necessary to participate in a class action lawsuit aimed at holding the company accountable for failing to safeguard your data. Importantly, victims do not need to prove that financial fraud has already occurred to seek legal recourse; the increased risk of future harm and the cost of mitigation are sufficient. Our firm handles these complex data breach cases on a contingency fee basis, meaning there are never any out-of-pocket costs or fees unless we successfully recover compensation on your behalf.

See every breach reported in Nebraska or read what to do after a ransomware attack.