
Lasership, Inc., doing business as OnTrac Final Mile, a major last-mile e-commerce delivery company, disclosed a data breach that affected more than 40,000 individuals in the United States.
The company, which provides parcel delivery and logistics services to retailers and shippers across 35 states and Washington, D.C., found that an unauthorized party accessed a portion of its corporate computer network in March 2026. Notably, this incident is separate and unrelated to the April 2025 data breach, which is in an ongoing consolidated class action litigation.
On March 23, 2026, OnTrac learned of potentially suspicious activity on a portion of its corporate computer network. The company began an investigation with the assistance of third-party cybersecurity specialists. The investigation determined that certain files may have been accessed without authorization between March 20 and March 22, 2026.
After identifying the unauthorized access, OnTrac worked with the third-party specialists to conduct a comprehensive review of the affected files. The purpose of the review was to determine what types of information the files contained and which individuals were affected.
The compromised files contained individuals' names along with other additional personal information. The specific data elements exposed were communicated to each affected person individually in their notification letter.
The breach was reported to the California Attorney General on July 22, 2026. The company's notification letters to affected individuals on July 22, 2026.
OnTrac is offering affected individuals 12 months of complimentary credit monitoring and identity protection services. These services are being provided through Cyberscout.
To enroll in these free services, affected individuals can visit the Cyberscout enrollment page and enter the unique code included in their notification letter. Enrollment must be completed within 90 days of the date of the letter.
OnTrac has also set up a dedicated assistance line for individuals with questions about the breach. The phone number is 1-800-405-6108, and representatives are available Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding holidays.
Affected individuals may also write to the company at 14850 Thompson Road, Chantilly, VA 20151.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)