Cyber Incident Victim: MODE Global, LLC
Date:
Apr 2022
Location:
United States of America
Summary
A transportation and logistics company experienced unauthorized access to its computer systems over a multi-week period, compromising sensitive consumer information including names, addresses, Social Security numbers, and driver's license numbers. The breach impacted 11,347 individuals and was detected during internal monitoring of network activity, prompting immediate system security measures and a forensic investigation with third-party specialists. Following confirmation that files containing personal data were accessed and exfiltrated, the organization completed its review of affected records and notified impacted consumers approximately five months after discovering the intrusion.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On April 18, 2022, an unauthorized party gained access to the computer systems of MODE Global, LLC, a Dallas-based transportation and logistics company. The intrusion persisted undetected until May 4, 2022, when internal monitoring identified unusual network activity. MODE Transport immediately initiated containment measures to secure its systems and engaged third-party data security specialists to conduct a forensic investigation. The investigation confirmed the unauthorized access spanned from April 18 to May 7, 2022, with the threat actor removing files containing sensitive consumer information. MODE Global completed its review of compromised files on September 13, 2022, determining that attackers accessed personally identifiable information including full names, physical addresses, Social Security numbers, and driver’s license numbers. The breach affected 11,347 individuals whose data resided on the compromised systems.
MODE Global formally reported the incident to multiple state attorneys general on October 17, 2022, coinciding with mailed breach notifications to all impacted consumers. The notifications detailed the specific data types exposed per individual and provided guidance on fraud prevention. As a non-asset based logistics provider operating since 1989, MODE Global maintains over 100 U.S. offices supporting intermodal, truckload, and parcel shipping services. The breach exposed no operational system details beyond the confirmed exfiltration of consumer data files during the 20-day access period. No ransomware deployment, financial theft, or post-breach fraudulent activity was disclosed in the Maine Attorney General filing. The company’s $2 billion annual revenue and 500+ employees were unaffected by remediation costs per available public records.