Transportation (Includes Logistics, Shipping, Maritime, Rail, Trucking)

January 16, 2026

Parsippany, New Jersey-based transportation provider, Safetyfirst Systems, LLC experienced a cyberattack in January and they are just now informing victims their personally identifiable data ended up stolen in the incident.
“On January 19, 2026, a log review revealed suspicious activity associated with a portion of our environment,” the company said in a notice to victims. “We secured and remediated the compromise, engaged additional third-party experts, hardened and enhanced our data security, and commenced an investigation.
“Unfortunately, these types of incidents have become commonplace and impact organizations of all sizes,” the company said. “A third-party forensic investigation determined the unauthorized actor had access to a limited portion of our environment between January 16, 2026, and January 19, 2026, and may have accessed some of your Information.”

March 20, 2026

Chantilly, Virginia-based transportation provider, LaserShip, Inc. doing business as OnTrac Final Mile suffered a cyberattack where personally identifiable information ended up stolen in the hack.
“On March 23, 2026, we learned of potentially suspicious activity on a limited portion our corporate computer network,” the company said in a notice to victims. “In response, we immediately began an investigation with the assistance of third-party specialists.”
In the course of the investigation, the parcel shipping company found certain files may have ended up accessed without authorization between March 20 and March 22.

August 4, 2026

A cyberattack halted gate operations at all three of North Carolina’s port facilities this past week and the Coast Guard is investigating the incident.
The breach, which occurred Tuesday, August 4, affected the Port of Wilmington, the Port of Morehead City and the Charlotte Inland Port, forcing the North Carolina Port Authority to delay gate openings and shifting to manual processing while it worked to contain the intrusion.
The port’s IT team activated the agency’s cybersecurity contingency plan upon discovering the attack, as well as reaching out to state authorities for further support, said an official at the Ports Authority.
The Port of Wilmington, the largest of the three, handles an average of 5,000 container gate moves per week and, together with Morehead City, processes 4.4 million short tons of cargo annually. The attack, detected on August 4, 2026, resulted in a systems-wide IT outage that forced all three facilities to revert to manual gate processing. This manual fallback allowed the IT team to focus on system recovery while maintaining a minimum level of operational continuity.

June 21, 2026

Salem, Oregon-based transportation provider, May Trucking Company suffered a cyberattack in June where personally identifiable information ended up stolen in the hack.
“On June 21, 2026, we detected suspicious activity within our network and immediately initiated an investigation,” the company said in a notice to victims of the attack. “We also engaged independent cybersecurity specialists to assist with the process.”
As a result of the investigation, the company found certain files ended up acquired without authorization at the time we detected the incident.

April 29, 2026

San Antonio, Texas-based supply chain and freight handling provider, Costa Solutions, LLC suffered a ransomware attack in April and is now letting victims know about the attack.
The April 29 Costa Solutions breach affected 19,758 Texas residents, with additional individuals potentially affected nationwide, according to a report with the Texas Attorney General’s office.
The information potentially affected includes names, addresses, Social Security numbers, driver’s license numbers, government-issued identification numbers, medical information, health insurance information, dates of birth, and other information.

July 11, 2026

Miami, Florida-based logistics company King Ocean Services Limited suffered a cyberattack in July where personally identifiable information ended up stolen in the hack.
King Ocean specializes in providing ocean transportation, trucking, and warehousing services across the Caribbean, Central America, and South America.
On July 11, 2026, King Ocean Services Limited provided notice regarding a data security incident that resulted in the exposure of personal information. This breach included sensitive information such as government ID numbers.

April 23, 2025

Memphis, Tennessee-based lifting, rigging, and transportation provider Barnhart Crane & Rigging Company, Inc. suffered a cyberattack last April and is now informing victims of the attack.
“On or about April 23, 2025, Barnhart detected unauthorized access to its network occurring between on or about April 23, 2025, and April 24, 2025,” according to a notice sent to victims of the attack. “Upon learning of this issue, Barnhart immediately commenced a prompt and thorough investigation.”
As part of its investigation, the company started working with external cybersecurity professionals experienced in handling these types of incidents.

October 25, 2025

St. Louis, Missouri-based transportation provider, Blue Enterprises, Inc. dba Hogan Transports, Inc., suffered a cyberattack in October where personally identifiable information ended up stolen in the hack.
“On or around November 29, 2025, Hogan became aware of unusual activity on certain systems in its network and promptly took steps to contain the activity and launched an investigation, with the support of third-party cybersecurity specialists,” the company said in a notice to victims. “The investigation determined that the network was accessed without authorization at various periods of time between October 25, 2025, and November 29, 2025, and certain files ended up accessed or copied.”
Following the investigation, Hogan conducted a comprehensive review of the data stored on the affected systems to determine what data the attacker stole and to whom the information belongs. This review concluded March 31.