Data Breach at CC Johnson & Malhotra: What You Need to Know
In December 2025, a significant data breach occurred at CC Johnson & Malhotra (ccjm.com), a well-known multi-disciplinary engineering firm in the USA. The breach was attributed to the cyber threat actor known as Sinobi, compromising sensitive information and raising concerns about security and data protection.
About CC Johnson & Malhotra
Founded with a commitment to excellence, CC Johnson & Malhotra is a leading engineering firm that specializes in a wide range of services. They provide civil, structural, environmental, MEP (Mechanical, Electrical, Plumbing), and surveying-inspection services for various projects, including buildings, infrastructure, water-wastewater management, transportation, and public-sector developments. Their expertise makes them a trusted partner in engineering solutions across the United States.
What Happened
On December 5, 2025, CC Johnson & Malhotra discovered a data breach that resulted in the unauthorized access and theft of approximately 300GB of sensitive data. The threat actor, Sinobi, executed a sophisticated attack that has raised alarm within the cybersecurity community. The breach not only jeopardizes the integrity of CC Johnson & Malhotra’s operations but also potentially exposes sensitive information of clients and partners.
Next Steps
If you believe you have been affected by this data breach, it is crucial to take action promptly. We at Srourian Law Firm (SLF) encourage those impacted to reach out to us to discuss your options. Our team is equipped to provide guidance and support in navigating the complexities of data breaches and protecting your rights.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against CC Johnson & Malhotra for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from CC Johnson & Malhotra, complete the form below so we can discuss your legal options.
Submit Your Information
