The Akira ransomware group claims it stole 13GB of data from Pacific Tank Lines, including passports, driver’s licenses, addresses, phone numbers, and payment details for 118 employees. Pacific Tank Lines has not publicly confirmed the incident. If you worked for the company, monitor your credit reports and consider a credit freeze immediately.
| Company | Pacific Tank Lines, Inc. |
|---|---|
| Industry | Other Commercial |
| Data Types Exposed | Passport Numbers, Driver’s License Numbers, Home Addresses, Phone Numbers, Payment Details, Financial Records, Client Information |
| People Affected | 118 individuals |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Pacific Tank Lines Data Breach?
A ransomware group known as Akira has claimed responsibility for a cyberattack on Pacific Tank Lines, Inc., a petroleum carrier that operates in the transportation sector. The group posted a listing stating it would release roughly 13GB of corporate data stolen from the company. This listing surfaced as part of the group’s extortion tactics, which typically involve threatening to publish stolen files unless a ransom is paid.
According to the claim, the stolen data includes detailed personal records belonging to 118 employees. The group says the files include passports, driver’s licenses, home addresses, phone numbers, and payment details. It also claims to have taken financial records and client information tied to the company’s business operations.
The exact breach discovery date has not been publicly disclosed. However, notification around this incident emerged in October 2026. As of now, Pacific Tank Lines has not issued a public statement confirming the attack. Because this report stems from the attacker’s own claim, it should be treated as unconfirmed until the company provides official word.
No detailed forensic timeline has been released. It remains unclear exactly when unauthorized access to the company’s network may have occurred, or how long the intruders may have had access before detection. Readers should understand that details could shift once, and if, Pacific Tank Lines releases an official breach notification.
Who was affected?
Based on the attacker’s claims, the breach appears to primarily affect current or former employees of Pacific Tank Lines. The stolen data reportedly includes passport numbers, driver’s licenses, and payment information tied to specific individuals. This suggests the exposed records are workforce-related rather than customer-facing.
The claimed number of affected individuals is 118 employees. This figure comes directly from the threat actor’s own post and has not been independently verified by the company. In addition to employee data, the attackers say they also obtained financial records and information about the company’s clients, which could extend the breach’s reach beyond the workforce alone.
Because Pacific Tank Lines operates as a petroleum carrier, it likely employs drivers and support staff across multiple states. As a result, affected individuals could be spread across a broad geographic area. It is not yet known whether any minors are involved, though this is unlikely given the nature of employment records.
What Information Was Potentially Exposed?
The threat actor’s claim outlines a range of sensitive personal and business data. If accurate, the exposure could affect multiple categories of highly sensitive identification and financial documentation. This type of information is especially valuable to identity thieves because it includes government-issued identity credentials.
- Passport numbers
- Driver’s license numbers
- Home addresses
- Phone numbers
- Payment details
- Financial records
- Client information
Exposure of passports and driver’s licenses creates a heightened risk because these documents are often used to verify identity for new financial accounts, loans, and government services. If criminals obtain this data, they could attempt to open fraudulent accounts or impersonate victims in other ways. This risk is amplified when payment details are included alongside identity documents.
In addition, the combination of addresses, phone numbers, and financial data increases the odds of targeted phishing and social engineering attempts. Scammers often use real personal details to make fraudulent calls or messages appear legitimate. Because of this, affected individuals should treat any unexpected contact with caution, even if it references accurate personal information.
What is the company doing?
Pacific Tank Lines has not publicly confirmed this incident as of this writing. No official statement describing an investigation, containment effort, or notification process has been released by the company. As a result, it is not possible to confirm what internal steps, if any, have been taken in response to the Akira group’s claims.
Because this report originates from a ransomware group’s extortion listing rather than a company disclosure, readers should treat claims about stolen data as unverified for now. If Pacific Tank Lines later issues a formal notification or regulatory filing, that would provide clearer confirmation of the scope and nature of the breach. Until then, affected individuals should rely on monitoring their own accounts and records rather than waiting for additional company guidance.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
If you worked for Pacific Tank Lines, it’s wise to pull your credit reports from all three major bureaus. You’re entitled to free weekly reports through AnnualCreditReport.com. Reviewing these regularly helps you catch new accounts or inquiries you didn’t authorize.
Because passport and driver’s license numbers may have been exposed, fraudsters could attempt to open credit lines using your identity. This means even small, unfamiliar entries on your report deserve immediate attention. Early detection often limits the damage from identity theft significantly.
Consider a Credit Freeze or Fraud Alert
Given that financial and identification data may be involved, placing a credit freeze with Equifax, Experian, and TransUnion is a strong protective step. A freeze blocks new creditors from accessing your file, which stops most fraudulent applications before they start. This is one of the most effective tools available to consumers.
Alternatively, a fraud alert requires lenders to verify your identity before extending credit. This option is less restrictive than a freeze but still adds a layer of protection. Either way, acting quickly reduces the window criminals have to exploit stolen information.
Watch for Phishing Attempts
Because your address, phone number, and other personal details may now be circulating, scammers could use this information to craft convincing phishing messages. Be cautious of unexpected emails, texts, or calls claiming to be from employers, banks, or government agencies. Legitimate organizations rarely ask for sensitive information through unsolicited messages.
If you receive a suspicious message referencing this breach, avoid clicking links or providing personal details. Instead, verify the request independently by contacting the organization directly. This simple habit can prevent many follow-on scams that stem from stolen data.
Protect Your Identity Documents
Since passports and driver’s licenses are reportedly part of the stolen data, consider contacting the issuing agencies to ask about reissuing these documents if you notice suspicious activity. The State Department and your local DMV can provide guidance on replacement procedures. Taking this step reduces the chance that stolen documents are used for impersonation.
In addition, keep a close watch on any government service accounts linked to these documents. For example, monitor your driver’s license record for unauthorized changes. This vigilance adds another layer of protection against identity misuse.
Consult a Data Breach Attorney
If you believe you were affected by this incident, speaking with a data breach attorney can help clarify your legal options. Many attorneys offer free consultations and can explain whether you may qualify to join or pursue legal action. This is especially relevant if sensitive identity documents like passports were exposed.
Because laws around data breach liability vary by state, an attorney can also help you understand applicable deadlines for filing a claim. Acting sooner rather than later ensures you don’t miss any important legal windows. A free case evaluation carries no obligation and can provide peace of mind.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.