United States
USA
Estes Express Lines ransomware disrupts LTL operations
Ransomware actors accessed Estes Express Lines’ network on 26/09/2023 and were detected on 01/10/2023, prompting the carrier to disconnect email, website, phones, and other critical systems for weeks. Operations continued with freight moving, but shipments were disrupted and some freight temporarily diverted to competitors.
70
Estimated severity
70 / 100
90
Source reliability
90 / 100
Approximate Date
01/10/2023
Targeted Company
ESTES EXPRESS LINES
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
21 days
Financial impact (USD M)
No information
Impact types
Service unavailabilityLogistics delayShipping disruptionOrder fulfillment or delivery disruptionOperational disruption
Affected sectors
TransportationLogistics & Warehousing
Affected departments
Information TechnologyLogistics & TransportationCustomer Service
Attack Profile
Attack types
Ransomware
Attributed threat actors
LOCKBIT
Sources
Incident Sources
securityweek.comhttps://www.securityweek.com/estes-express-lines-says-personal-data-stolen-in-ransomware-attacksupplychaindive.comhttps://www.supplychaindive.com/news/estes-express-lines-cyberattack-timeline/700886ttnews.comhttps://www.ttnews.com/articles/cyberattack-estes-expresstechradar.comhttps://www.techradar.com/pro/security/freight-giant-estes-confirms-data-breach-but-says-it-wont-pay-ransom