Lasership Inc. dba OnTrac Final Mile (“OnTrac”) experienced a major data breach that impacted 40,017 individuals across the United States. On April 15, 2025, OnTrac discovered suspicious activity on its computer network.
An investigation determined that an unauthorized actor may have accessed certain files between April 13, 2025 and April 15, 2025. The data breach compromised both personally identifiable information (PII) and protected health information (PHI).
Exposed information includes names, dates of birth, Social Security numbers, driver’s license or state ID numbers, health insurance information and medical information. OnTrac began notifying affected individuals by mail on Aug. 27, 2025.
The breach was reported to state authorities, including the California Attorney General’s office, the Maine Attorney General’s office, the Massachusetts Attorney General’s office and the Texas Attorney General’s office on Aug. 27 and Aug. 28, 2025. Affected individuals include 559 in Texas, 28 in Massachusetts, and five in Maine.
In addition to required state and federal disclosures, OnTrac is offering affected individuals 12 months of free TransUnion Cyberscout single-bureau credit monitoring services.
If you receive a notice from OnTrac about this breach, you may want to:
For more information about the company, visit the OnTrac website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.