OnTrac Breach Exposes Customer Data

OnTrac disclosed unauthorized access to files on its corporate network between March 20 and March 22, 2026, with detection on March 23.

The company said customer personal information may have been accessible, but public notifications leave the full data scope and affected population unclear; one secondary report cited more than 40,000 individuals. OnTrac engaged outside investigators, re-secured affected data, notified authorities and customers, and offered 12 months of credit monitoring and identity protection.