Threat Intelligence Brief
Curated summary with source attribution
Source: safestate.com
Threat Risk: Medium
Victim: OnTrac customers
Incident: A corporate network intrusion resulted in the theft of customer personal information.
Impact: Exposure of PII increases the risk of impersonation and targeted fraud for affected customers.
Attacker: Unidentified threat actors
Analysis: An intruder accessed OnTrac’s corporate network for a brief window in March 2026. While the company only confirmed the exposure of names, the provision of credit monitoring strongly suggests more sensitive PII was compromised. The wording of customer notifications suggests a potential, though unconfirmed, ransom payment to secure the stolen data.
Recommendations: Enable multi-factor authentication on all sensitive corporate and personal accounts.; Monitor credit reports and financial statements for signs of unauthorized activity.; Maintain high vigilance against phishing attempts leveraging delivery-themed social engineering.
Source: SafeState
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source