Barnhart Group Data Breach Exposes PII and PHI

Barnhart Group, a major provider of transportation, logistics and heavy-haul services, recently experienced a data breach affected 1,435 individuals, including 434 residents of Texas and two of Maine.

The incident was the result of a ransomware attack claimed by the group known as Akira. On Nov. 14, 2025, Akira posted on the dark web that it had compromised Barnhart Group’s corporate data, reportedly accessing a broad range of sensitive information, including both personally identifiable information (PII) and protected health information (PHI).

The confirmed exposed data includes names, Social Security numbers, driver’s license numbers, government-issued ID numbers (such as state ID cards and passports), credit or debit card numbers, financial account numbers, medical information.

The Akira group further claims to have obtained detailed employee and customer records, audit and payment details, invoices, emails, phone numbers, confidential documents, non-disclosure agreements and other documents containing personal details.

Starting on Feb. 4, 2026, the breach was officially disclosed to the attorneys general offices of Maine, Texas and Vermont.

Barnhart Group's response

Following the breach, Barnhart Group notified affected individuals by U.S. Mail, as required by law. While the company has not publicly detailed all steps taken in response, notification letters typically include information on what was compromised and guidance on protective measures.

Given the nature of the data exposed, affected individuals should remain vigilant for signs of identity theft or fraud. It is advisable to monitor credit reports, consider placing fraud alerts or credit freezes, and watch for suspicious activity on financial accounts.

Additionally, those whose medical information was exposed should be alert for unusual health insurance claims or medical bills.

If a notice letter was received, individuals should follow all instructions provided, which may include enrolling in credit monitoring or identity theft protection services.