OnTrac's corporate network was breached by attackers who accessed files containing customer personal information between March 20 and 22, 2026. The company discovered the breach on March 23 and initiated an internal investigation with third-party assistance to assess the scope and re-secure the data. The specific types of exposed data beyond customer names were redacted in notifications. OnTrac has not confirmed any ransom payment but implied possible negotiation to prevent data distribution. No fraud or misuse has been reported, and no extortion groups have claimed responsibility. The company is providing affected customers with 12 months of free credit monitoring and identity protection services.

Potential unauthorized access to personal customer information, including names and possibly other sensitive data, which could lead to identity theft or fraud if exploited. No confirmed misuse or fraud has been reported as of the notification date. The breach affects customer privacy and may impact customer trust in OnTrac's data security practices.

OnTrac has taken steps to investigate and contain the breach by engaging third-party specialists and re-securing the compromised data. Affected customers are offered free 12-month credit monitoring and identity protection services with a 90-day enrollment window. Customers are advised to review credit reports and account statements and consider placing fraud alerts or credit freezes if they assess a significant risk. No official patch or fix applies as this is a network breach incident rather than a software vulnerability. Organizations should monitor vendor communications for updates.