OnTrac Says Hackers Accessed Files That May Contain Customer Data
Summary
OnTrac says hackers accessed files on its corporate network between March 20 and 22, potentially exposing customer personal data. The company is investigating and offering affected customers 12 months of credit monitoring and identity protection.
Key points
- OnTrac says it detected the incident on March 23 and found that an attacker accessed certain files between March 20 and 22.
- Customer names may have been exposed, but the company has not clarified what other personal information was involved.
- OnTrac hired a third-party specialist to help determine the breach’s scope and says it took steps to re-secure the data.
- The company says it knows of no fraud or publication of stolen information resulting from the incident.
- Affected customers are being offered 12 months of credit monitoring and identity protection, with a 90-day enrollment deadline.
- No ransomware or data-extortion group had claimed responsibility at the time of publication.
Article Details
- Victim Organization
- OnTrac
- Incident Type
- Confirmed corporate network breach with possible access to customer personal data
- Disclosure Date
- 2026-07-24
- Data Types Exposed
- Names
- Other customer personal details (specific data elements unclear)
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- The incident was detected on March 23, and certain files were accessed between March 20 and 22; the year is not specified. OnTrac said it took steps to re-secure the data. No operational disruption is described.
- Ransom Or Extortion
- The article suggests OnTrac's statement about re-securing the data could indicate an agreement with the attackers, possibly a ransom payment. No payment was confirmed, and no ransomware or data-extortion group had claimed responsibility at publication time.
- Claim Status
- confirmed