OnTrac notifies customers of data breach after network hack
OnTrac notifies customers of a data breach after hackers accessed its corporate network.
Parcel delivery company OnTrac is notifying customers of a data breach after hackers gained access to its corporate network between March 20 and 22. The company detected the incident on March 23 and is investigating the extent of the data exposure, which may include personal customer details. OnTrac is offering 12 months of free credit monitoring and identity protection services to affected customers.
AI summary of the linked source. Not reviewed by an editor. How this works
Run OnTrac?
Get an email when a new story names OnTrac, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonHackers gained unauthorized access to OnTrac's corporate network over a two-day window, suggesting insufficient access controls, weak perimeter defenses, or undetected lateral movement capabilities. The fact that the breach spanned March 20–22 before detection on March 23 indicates monitoring gaps that allowed attackers to dwell undetected. For a parcel delivery company handling personal customer data, this exposure creates significant identity theft and fraud risks for affected individuals. This incident underscores how a brief window of unauthorized network access can result in large-scale personal data compromise, triggering notification obligations and reputational damage.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Network detection and response (NDR)
Attackers moving between systems inside the network get seen.
- Incident response retainer
Experts are on call before the worst day, not searched for during it.