[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7clRwSl8qM2atEBGTOaHMaKoktyXz7Vkzoa7GNjWaf0":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"f7c14f23-c320-4a1c-bfe5-c0202749dd69","OnTrac notifies customers of data breach after network hack","ontrac-notifies-customers-of-data-breach-after-network-hack-ce229f","OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details belonging to its customers. [...]","Parcel delivery company OnTrac is notifying customers of a data breach after hackers gained access to its corporate network between March 20 and 22. The company detected the incident on March 23 and is investigating the extent of the data exposure, which may include personal customer details. OnTrac is offering 12 months of free credit monitoring and identity protection services to affected customers.","OnTrac notifies customers of a data breach after hackers accessed its corporate network.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fontrac-notifies-customers-of-data-breach-after-network-hack\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F24\u002FOnTrac.jpg","2026-07-24T19:55:01+00:00","2026-07-24T20:00:24.5197+00:00",7,[17,20],{"name":18,"type":19},"OnTrac","vendor",{"name":21,"type":22},"CyberScout","product","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":23,"icon":25,"name":26,"slug":27},null,"Breaches","breaches",[29,31,36],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":44,"vendors":129},[45,74,103],{"slug":46,"name":47,"problem":48,"products":49},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"slug":75,"name":76,"problem":77,"products":78},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[79,87,95],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",{"slug":104,"name":105,"problem":106,"products":107},"incident-response-retainer","Incident response retainer","Experts are on call before the worst day, not searched for during it.",[108,113,121],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":109,"product_name":110,"url":111,"description":112},"unit-42-retainer","Unit 42 Retainer","https:\u002F\u002Fwww.paloaltonetworks.com\u002Funit42\u002Fretainer","Incident response retainer with Unit 42, including preparation services.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","incident-response","CrowdStrike Incident Response","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fservices\u002Fincident-response\u002F","Incident response services, available on retainer.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"truesec","Truesec","\u002Fvendor-logos\u002Ftruesec.png","truesec-incident-response","Truesec Incident Response","https:\u002F\u002Fwww.truesec.com\u002Fservice\u002Fincident-response","Incident response team with a retainer option.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":146},"ontrac-network-breach-exposes-customer-data-via-unauthorized-access","OnTrac Network Breach Exposes Customer Data via Unauthorized Access","Hackers gained unauthorized access to OnTrac's corporate network over a two-day window, suggesting insufficient access controls, weak perimeter defenses, or undetected lateral movement capabilities. The fact that the breach spanned March 20–22 before detection on March 23 indicates monitoring gaps that allowed attackers to dwell undetected. For a parcel delivery company handling personal customer data, this exposure creates significant identity theft and fraud risks for affected individuals. This incident underscores how a brief window of unauthorized network access can result in large-scale personal data compromise, triggering notification obligations and reputational damage.",[135,136,137,138,139,140,141,142,143,144,145],"CIS Control 6: Access Control Management","CIS Control 13: Network Monitoring and Defense","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 AC-2: Account Management","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 IR-4: Incident Handling","NIST SP 800-53 SI-4: System Monitoring","NIST CSF DE.CM-1: Network Monitoring","GDPR Article 33: Notification of a Personal Data Breach to Supervisory Authority","GDPR Article 34: Communication of a Personal Data Breach to the Data Subject","ITIL 4: Incident Management Practice",{}]