Logistics Giant WEL Companies Confirms Major Data Security Incident

De Pere, Wisconsin-based WEL Companies reported that in January, cyber criminals infiltrated its internal systems, compromising and gaining access to the personal information of over 120,000 people.

 

WEL Companies is a transportation and logistics provider specialising in temperature-controlled trucking and warehousing, with primary operations in Wisconsin, Pennsylvania, Georgia, and Florida.

 

In a data security incident notice filed with the Office of Maine Attorney General, WEL Companies said that on  January 31, it  experienced a network disruption. The transportation company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected systems and notified relevant law enforcement authorities about the same.

 

“The investigation determined that certain files were acquired without authorisation on March 28, 2025. We then undertook a comprehensive review of those files and, on or about November 12, 2025, learned that some of your personal information was contained within the potentially affected data which is the reason for this notification,” WEL Companies said.

 

The compromised data included names, and other personal identifiers including Social Security numbers. The filing with the Maine state regulator’s office also states that WEL Companies has identified at least 122,960 individuals affected by the incident.

 

“We have also taken additional steps and implemented measures to enhance security and minimise the risk of a similar incident occurring in the future,” the company added.

 

WEL Companies has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general. 

 

It has also offered one year of complimentary identity protection and credit monitoring services through Kroll to all affected individuals.

 

 

 

The RansomHub ransomware group claimed responsibility for the cyber attack and listed WEL Companies as a victim on its data leak site. The group claimed to be in possession of nearly 200 GB of organisation’s data and threatened to leak it unless its ransom demands were met.