Earlier this week, Forward Air, a trucking and freight logistics giant headquartered in Tennessee, disclosed a data breach of former employees’ personal information following a ransomware attack that occurred in late December 2020. A data breach notification was sent to Forward air employees that explained that specific systems were accessible to an unauthorized third-party between November and early December of 2020. The notification emphasized that personal data may have been included in the system data that was possibly viewed or taken by an “unknown threat actor”. The personal data potentially accessed includes “employee’s names, addresses, dates of birth, Social Security numbers, driver’s license numbers, passport numbers, or bank account numbers”. Security researchers believe that the attack was conducted by members of Evil Corp under the threat group Hades, and data associated to this ransomware attack has yet to be leaked by any threat actors. Forward Air emphasized that there is currently no indication that any data has been misused, but CTAPT will continue to watch for additional repercussions of Forward Air’s ransomware attack from December of 2020.