In April 2025, U.S. delivery company OnTrac suffered a data breach exposing sensitive personal information of over 40,000 individuals. The compromised data included names, dates of birth, Social Security numbers, driver’s license or state IDs, and medical/health insurance details. Attackers accessed the company’s network between April 13th and 15th, 2025, though OnTrac claims the data was re-secured and not distributed, with no evidence of misuse or fraud thus far. Despite this, the exposed information could enable malicious activities such as medical identity theft (e.g., fraudulent insurance claims, prescription drug resale), financial fraud (e.g., fake bank accounts, tax returns), or benefits theft. OnTrac responded by offering affected individuals 12 months of free credit monitoring and identity protection services via TransUnion and CyberScout. While the company acted swiftly to mitigate risks, the breach highlights the persistent threat of identity theft and the need for vigilance against phishing and social engineering attacks.