OnTrac Data Breach Exposes Personal Information of Over 40,000 Individuals

American delivery company OnTrac Final Mile said the data security incident it suffered earlier this year compromised the sensitive personal information of over 40,000 individuals.

 

OnTrac Final Mile is a last-mile e-commerce delivery company that provides same-day and next-day residential delivery services across the United States. The company helps retailers and shippers meet growing e-commerce demand by offering faster delivery times, and lower costs.

 

In a data security incident notice filed with the Office of Maine Attorney General, OnTrac said that on April 15, it identified unusual activity within its internal network. The delivery company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

“The investigation determined that certain files may have been accessed without authorisation between April 13 and April 15, 2025. Therefore, we worked with third-party specialists to begin a comprehensive review of the files at issue to determine the type of information they contained and to whom the information related,” OnTrac said.

 

The compromised data included names, dates of birth, Social Security Numbers, Driver’s License

or State IDs, medical information, and health insurance information. The filing with the Maine state regulator’s office also states that OnTrac has identified at least 40,017 individuals affected by the incident.

 

“We also took steps to further enhance the security of our network and help prevent a similar

incident from occurring in the future,” the company added.

 

While OnTrac found no evidence of the compromised information being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and state attorney general. 

 

It has also offered one year of complimentary identity protection and credit monitoring services through Cyberscout to all affected individuals.