Almeida Law Group is investigating a data breach at Yellow Corporation and its affiliated debtors and debtors-in-possession under their jointly administered chapter 11 cases (Case No. 23-11069 (Bankr. D. Del. (CTG)). The breach occurred on March 27th, 2025 and was discovered on November 12th, 2025. If you were affected, contact Almeida Law Group.
About Yellow Corporation and its affiliated debtors and debtors-in-possession under their jointly administered chapter 11 cases (Case No. 23-11069 (Bankr. D. Del. (CTG))
Yellow Corporation was formerly one of the largest less-than-truckload (LTL) freight carriers in North America, operating more than 12,500 trucks, 42,000 trailers, and 300 facilities with roughly 30,000 employees under the name YRC Worldwide. The company ceased all trucking operations in late July 2023 and filed for Chapter 11 bankruptcy on August 6th, 2023 in the U.S. Bankruptcy Court for the District of Delaware. It is headquartered in Overland Park, Kansas, and is currently in a liquidation process. Because the company employed tens of thousands of people and administered employee benefits, it held a wide range of personnel records containing sensitive personal, financial, and health-related information.
What Happened?
Yellow Corporation and its affiliated debtors and debtors-in-possession under their jointly administered chapter 11 cases (Case No. 23-11069 (Bankr. D. Del. (CTG)) was listed in a Texas Attorney General data security breach report (Record ID: BR-0005145). According to that report, the breach occurred on March 27th, 2025 and was not discovered until November 12th, 2025—a gap of approximately seven and a half months. The incident affected 258,781 individuals in total. The compromised information included names, Social Security numbers, driver’s license numbers, government-issued ID numbers such as passports and state ID cards, financial account and card numbers, medical information, health insurance information, and dates of birth. Consumer notice was provided by publication in print media and by posting on a company or special website; no direct mail notice was indicated.
The delayed timeline raises significant concerns. The breach was not reported to the Texas Attorney General until June 30th, 2026—more than thirteen months after the breach date and more than seven months after discovery. The reliance on print media and website posting rather than direct mail notice may reflect the reality that a bankrupt entity that ceased operations in 2023 no longer has current mailing addresses for all affected individuals. No independent cybersecurity reporting, ransomware group attribution, or class action litigation specifically tied to this data breach has been reported as of June 30th, 2026.
Key Facts at a Glance
- Company or Organization: Yellow Corporation and its affiliated debtors and debtors-in-possession under their jointly administered chapter 11 cases (Case No. 23-11069 (Bankr. D. Del. (CTG))
- Industry: Transportation / Trucking / Less-Than-Truckload (LTL) Freight
- Location: Overland Park, Kansas
- Incident type: Data breach (unauthorized acquisition of personal information)
- Date of breach: March 27th, 2025
- Date breach discovered: November 12th, 2025
- Date of consumer notification: June 30th, 2026 (date published at Texas AG website)
- Total persons affected: 258,781
- Source: Texas Attorney General Data Security Breach Report, BR-0005145 (https://oag.my.site.com/datasecuritybreachreport/apex/DataSecurityReportsPage#BR-0005145); Yellow Corporation bankruptcy background (https://investors.myyellow.com/news-releases/news-release-details/yellow-corporation-files-voluntary-chapter-11-petitions/); https://www.npr.org/2023/08/07/1192435176/yellow-corp-declares-bankruptcy
What Should You Do?
If you believe you were affected by this breach, act quickly to protect yourself. Review your credit reports for unfamiliar accounts or inquiries at AnnualCreditReport.com, where you are entitled to free reports from each of the three major bureaus. Consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion to make it harder for someone to open new accounts in your name. Because medical information and health insurance information were among the data types exposed, also review any Explanation of Benefits statements from your insurer and request copies of your medical records to check for services you did not receive. Monitor your financial accounts closely for unauthorized transactions. If you detect signs of fraud or identity theft, report them at IdentityTheft.gov, which can help you create a personalized recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
