Back to Intelligence
Risk & Disruption
High Impact

Major Logistics Firms Hit by Whitearmor Ransomware Gang

Share

Get tomorrow's supply chain signal

Daily supply-chain brief. Free, unsubscribe anytime.

The signal

A recently emerged cybercriminal group called Whitearmor has orchestrated coordinated ransomware attacks against three major North American transportation and logistics companies: J.B. Hunt, Ryder System, and Echo Global Logistics. The attacks, which occurred in late October, compromised sensitive employee personal information and business data, prompting multiple class-action lawsuits from affected workers alleging inadequate cybersecurity protections. The incident highlights a critical vulnerability in the transportation sector and signals the emergence of a new threat actor with sophisticated targeting capabilities.

The ransomware demands reached $5 million from J.B. Hunt alone, with Whitearmor claiming to hold over 140,000 employee records, millions of carrier contacts, invoices, and organizational data. Notably, industry experts from the National Motor Freight Traffic Association indicate this group has targeted numerous companies ranging from large national fleets to smaller regional operators since October. The rapid proliferation of lawsuits across multiple federal districts suggests an organized legal ecosystem responding to the breach disclosures.

For supply chain professionals, this incident underscores the operational and reputational risks posed by inadequate cybersecurity infrastructure. The lawsuits specifically cite failures to implement encryption, employee training programs, malware scanning protocols, and firewall protections. While no significant operational disruptions have been publicly reported for these three companies, the potential for customer data compromise and the attention from regulators and litigators creates sustained pressure on the industry to elevate security standards.

Frequently Asked Questions

Get the daily supply chain briefing

Top stories, Pulse score, and disruption alerts. No spam. Unsubscribe anytime.