Almeida Law Group is investigating a data breach at LaserShip, Inc. dba OnTrac Final Mile. The breach occurred on March 20th, 2026 and was discovered on an unspecified date. If you were affected, contact Almeida Law Group.
About LaserShip, Inc. dba OnTrac Final Mile
LaserShip, Inc. dba OnTrac Final Mile is a last-mile e-commerce parcel delivery company headquartered in Vienna, Virginia. Founded in 1986 as Laser Courier, the company acquired west coast carrier OnTrac Logistics in 2021 for approximately $1.3 billion, combining the two networks into a transcontinental same-day and next-day residential delivery service. OnTrac operates 64 facilities across 31 states and reports annual revenues of approximately $1.5 billion. Because the company handles parcel delivery for a wide range of retail and commercial customers, its systems may contain personal information about both employees and customers.
What Happened?
LaserShip, Inc. dba OnTrac Final Mile was listed in a California Attorney General sample breach notice filed on July 22nd, 2026. According to the notice, on March 23rd, 2026, OnTrac learned of potentially suspicious activity on a limited portion of its corporate computer network. A forensic investigation conducted with the help of third-party specialists determined that certain files may have been accessed without authorization between March 20th and March 22nd, 2026. A third-party data review was completed to identify what information was contained in the affected files. The notice states that the files included recipients’ names combined with additional data elements, but the specific data types were redacted in the sample notice filed with the California Attorney General and have not been publicly reported. OnTrac states it is not aware of any fraud or publication of stolen information resulting from the incident. The company is offering 12 months of complimentary single-bureau credit monitoring and identity protection services through Cyberscout, a TransUnion company. No ransomware group attribution or threat-actor claims specific to this March 2026 incident have been identified.
This is notably the second data breach OnTrac has reported in under a year. The company previously disclosed a separate incident occurring between April 13th and April 15th, 2025, which was discovered on April 15th, 2025, and affected approximately 40,017 individuals. That earlier breach exposed sensitive personal information including names, dates of birth, Social Security numbers, driver’s license details, and health and medical information, according to reporting on the Maine Attorney General filing. Multiple law firms investigated class action claims related to that April 2025 incident.
Key Facts at a Glance
- Company or Organization: LaserShip, Inc. dba OnTrac Final Mile
- Industry: Last-mile e-commerce parcel delivery / Transportation & Logistics
- Location: Vienna, Virginia (headquarters)
- Incident type: Unauthorized access to corporate computer network files
- Date of breach: March 20th, 2026
- Date breach discovered: March 23rd, 2026
- Date of consumer notification: July 22nd, 2026
- Identity theft protection offered: 12 months of complimentary single-bureau credit monitoring and identity protection services through Cyberscout (a TransUnion company)
- Enrollment deadline: 90 days from July 22nd, 2026
- Prior breach: Yes — a separate incident occurring April 13th–15th, 2025, affecting approximately 40,017 individuals, with SSNs, dates of birth, driver’s license information, and health/medical information exposed
- Litigation status: No litigation identified specific to this March 2026 breach; multiple law firms investigated class action claims related to the prior April 2025 breach
- Source: California Attorney General sample breach notice (https://oag.ca.gov/ecrime/databreach/reports/sb24-626905); OnTrac breach notice letter (https://oag.ca.gov/system/files/Lasership_Ontrac%20-%20Adult_Letter%20-%20Mailing%20Proof.pdf); Fox News reporting on prior breach (https://www.foxnews.com/tech/delivery-giants-data-breach-exposes-40000-personal-records); ClassAction.org prior breach investigation (https://www.classaction.org/data-breach-lawsuits/ontrac-august-2025)
What Should You Do?
If you received a notice from OnTrac, enroll in the 12 months of complimentary credit monitoring and identity protection offered through Cyberscout as soon as possible — you have 90 days from July 22nd, 2026 to do so by visiting https://bfs.cyberscout.com/activate and using the enrollment code provided in your notice. Regardless of whether you enroll, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent unauthorized accounts from being opened in your name. Review your credit reports for suspicious activity; under federal law you are entitled to one free report from each bureau annually through AnnualCreditReport.com. Monitor your financial accounts closely for unfamiliar charges or changes. If you believe you have already been the victim of identity theft, visit IdentityTheft.gov for step-by-step guidance.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
