OnTrac notifies customers of data breach after network hack

OnTrac disclosed a network breach detected on March 23 after attackers accessed files between March 20–22 that may have contained customer personal information; the company engaged a third-party specialist, offered 12 months of credit monitoring via CyberScout, redacted details of the exposed data in notifications, and suggested a possible ransom payment though no threat group has claimed responsibility.