OnTrac, a major parcel delivery company, has notified customers of a network breach that may have exposed personal information. The hack compromised the company's corporate systems.
OnTrac discovered unauthorized access to its network and is informing affected customers of the potential exposure of their data. The company has not yet disclosed the full scope of information accessed or the number of customers impacted.
The breach highlights ongoing security challenges in the logistics sector, where companies handle vast amounts of customer personal data including names, addresses, and contact information.
OnTrac has not provided details on when the breach occurred, how long attackers maintained access, or what specific data was compromised. The company is investigating the incident and working to secure its systems.
Affected customers are advised to monitor their accounts for suspicious activity and consider placing fraud alerts with credit agencies. OnTrac is expected to provide additional information as its investigation progresses.
The breach follows similar incidents across major logistics and delivery services, raising questions about the adequacy of cybersecurity measures in the industry.
A threat actor deployed the open-source Hermes AI agent in unattended mode to automate post-exploitation activities during an alleged breach of Thailand's Ministry of Finance.
Slopsquatting, phantom domains, and HalluSquatting exploit identical vulnerabilities in AI coding agents. Security researchers warn that these attacks leverage late-binding patterns where AI systems trust non-existent packages and repositories.
Chick-fil-A confirmed a credential stuffing attack compromised over 13,000 customer accounts between June 17-19. The breach targeted the restaurant chain's website and mobile app.
A Hanwha security camera shipped with a hardcoded GitHub administrative token visible in its login page source code, potentially granting unauthorized access to the company's repositories.