OnTrac Data Breach: What LaserShip / OnTrac Final Mile Customers Need to Know
LaserShip, Inc., doing business as OnTrac Final Mile, has reported a data breach that may have exposed the sensitive personal information of approximately 40,017 individuals nationwide. If you received a notice, understanding what was exposed and what steps you can take now is important.
What Happened in the OnTrac Data Breach
A timeline of the delivery company’s security incident
OnTrac Final Mile is a nationwide last-mile e-commerce delivery company formed through the combination of LaserShip and OnTrac. According to the company’s public disclosures, OnTrac detected suspicious activity on a limited portion of its computer network on or about April 15, 2025. The company launched an investigation with third-party forensic specialists and determined that an unauthorized actor may have accessed certain files between April 13 and April 15, 2025.
After a review of the affected files, OnTrac began mailing notification letters to affected individuals on August 27, 2025. The incident was reported to multiple state regulators, including the California Attorney General, whose office maintains a public database of breach notices submitted by companies that notify more than 500 residents of that state. The exposure of files during even a short intrusion window can be significant, because the files may contain highly sensitive identity and health details collected over long periods.
What Information Was Exposed in the OnTrac Final Mile Breach
The categories of sensitive data involved
Based on the company’s notification, the OnTrac data breach may have compromised both personally identifiable information (PII) and protected health information (PHI). According to the notice, the categories of information potentially involved included names, dates of birth, Social Security numbers, driver’s license or state identification numbers, health insurance information, and medical information.
Social Security numbers and driver’s license numbers are among the most valuable data types to identity thieves because they can be used to open fraudulent accounts, file false tax returns, or commit medical identity theft. OnTrac stated it is providing 12 months of complimentary credit monitoring and identity protection services through TransUnion and CyberScout to affected individuals. Enrolling in any monitoring offered in your letter is a prudent first step, but it does not by itself resolve every potential risk associated with exposed identity data.
Who Is Affected and What the Risks Are
Understanding your exposure as a potentially affected individual
The company reported that approximately 40,017 individuals across the United States may have been affected. Because OnTrac provides delivery services for online retailers, affected individuals may include consumers whose information passed through OnTrac’s systems, as well as others whose data the company maintained.
When Social Security numbers and medical information are exposed together, the potential consequences can extend well beyond a single fraudulent charge. Victims of data theft have reported identity theft attempts ranging from unauthorized credit applications to medical services billed in their name. Because stolen data can circulate for years, remaining vigilant over time — not just immediately after the breach — is an important part of protecting yourself.
What to Do If You Received an OnTrac Data Breach Notice
Practical protective steps you can take today
If you received a notification letter, keep it for your records, as it may contain a unique enrollment code and details specific to your situation. Consider enrolling in the complimentary credit monitoring offered, reviewing your bank and credit card statements for unauthorized activity, and requesting your free credit reports at AnnualCreditReport.com to check for unfamiliar accounts.
You may also consider placing a fraud alert or a credit freeze with the major credit bureaus, and remaining alert to phishing emails, calls, or texts that reference OnTrac or the breach by name. Beyond these self-protective steps, you may have legal options. Speaking with a legal professional can help you understand whether you may be entitled to compensation and what your rights are.
Frequently Asked Questions About the OnTrac Data Breach
When did the OnTrac data breach happen?
OnTrac detected suspicious activity on its network on or about April 15, 2025, and determined that files may have been accessed between April 13 and April 15, 2025. The company began mailing notification letters to affected individuals on August 27, 2025.
How many people were affected by the OnTrac Final Mile data breach?
According to OnTrac’s notification, approximately 40,017 individuals across the United States may have been affected.
What information was exposed in the OnTrac data breach?
The company reported that potentially affected information included names, dates of birth, Social Security numbers, driver’s license or state ID numbers, health insurance information, and medical information.
Is OnTrac offering free credit monitoring?
Yes. OnTrac stated it is providing 12 months of complimentary credit monitoring and identity protection services through TransUnion and CyberScout to affected individuals.
Can I take legal action after the OnTrac data breach?
You may have legal options if your information was exposed. A legal professional can review your situation during a free consultation and explain whether you may be entitled to compensation.
How do I know if I was affected?
If you received a data breach notification letter from LaserShip or OnTrac Final Mile, your information may have been involved. If you are unsure, you can contact a legal professional to help you evaluate your situation.
Contact Wilshire Law Firm About the OnTrac Data Breach
If your personal information was exposed in the OnTrac Final Mile data breach, you may be entitled to compensation. Wilshire Law Firm’s nationally recognized, award-winning team is here to help you understand your rights.
We offer free consultations and free case reviews with a legal professional, and we are available 24/7. There are no fees unless you get paid.
Contact Wilshire Law Firm today to schedule your free case review and learn more about your options after the OnTrac data breach.
