HackingTransportation & LogisticsTransportationData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)PHIHealth (basic)LowContained

Estes Forwarding Worldwide

bd_1a712fdf2909917a · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 16, 2026

Filed

Apr 3, 2026

To disclose

18 days

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Estes Forwarding Worldwide →2 incidents on file

Estes Forwarding Worldwide, LLC notified Massachusetts residents of a data security incident. Unauthorized access occurred on or around May 25, 2025. The company discovered on March 16, 2026, that files potentially removed by an unauthorized third-party actor contained personal information, including full names and medical information. The threat was contained, and an investigation with external cybersecurity professionals was conducted. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d18 days discovery → filing

Incident timeline

undetected · 295 days

discovery → filing · 18 days

May 25, 2025

Begins

Mar 16, 2026

Discovered

Apr 3, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_f27ea514cb377a902025-05-24 · +314dVerified by operator

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_b8cff546a41f31d12026-04-03Verified
Indiana State AGbd_d64b005892327d472026-04-03Verified
Nebraska State AGbd_f8c091570e13832d2026-04-03Verified

Name: Estes Forwarding Worldwide
norm: estes forwarding
Domain: efwnow.com

Name: Estes Forwarding Worldwide
norm: estes forwarding
Domain: efwnow.com
Industry: Transportation & Logisticsllm

Discovered: Mar 16, 2026
Breach occurred: May 25, 2025
Undetected for: 295 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)PHIHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Contained the threat
Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals experienced in handling these types of incidents
Conducted extensive manual document review
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: Leak >180dClock withheld · confirmation date

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGApr 3 · first

Indiana State AGApr 3 · first

Nebraska State AGApr 3 · first

Massachusetts State AGApr 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-524-estes-forwarding-worldwide-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2026
Raw hash: 6d3458b54960f66a8dd5734b978c8bee4be858dfe4c279dd1a517ed0cabaa1aa

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityEstes Forwarding Worldwide

Victim entityEstes Forwarding Worldwide

Incidentdiscovered Mar 16, 2026

Stated responseContained the threat

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov