J.B. Hunt Transport Services faces at least four federal class-action lawsuits tied to an alleged data breach that reportedly exposed private information belonging to current and former employees. The cases were filed by Oct. 29, according to the complaints described in the reports.
The alleged incident involves WhiteArmor, a hacker group that claimed it obtained more than 140,000 records containing employee information. The records allegedly include names, addresses, Social Security numbers and other employment data. WhiteArmor reportedly listed the material on a data-leak site and posted samples that it said verified the theft.
What the complaints allege
The lawsuits accuse J.B. Hunt of failing to use adequate safeguards for employee information. The plaintiffs say the company had a responsibility to protect the data and had the resources to do so. They further allege that weaknesses in the company’s security controls permitted the incident and exposed affected people to an ongoing risk of identity theft and fraud.
“Defendant, as a substantial business, had the resources available to take seriously the obligation to protect private information.”
That statement appears in one of the complaints. It is an allegation by the plaintiffs, not a court finding. The cases also allege that the disclosure occurred without permission and that unauthorized cybercriminals obtained the information.
The reported scope of the material claimed by WhiteArmor extends beyond employee records. The group reportedly said it possessed 1.7 million carrier contacts, 38.2 million invoices and 973 company email accounts. Those figures are claims attributed to the hacker group in the litigation and do not establish that every item was accessed or that all of the information was authentic.
| Information reportedly claimed | Reported amount |
|---|---|
| Employee records | More than 140,000 |
| Carrier contacts | 1.7 million |
| Invoices | 38.2 million |
| Company email accounts | 973 |
Ransom demand reported
The plaintiffs say WhiteArmor demanded a ransom of $5 million in cryptocurrency. The complaints do not establish whether J.B. Hunt paid that demand. They also do not, in the information reported, establish that the alleged data was used to commit identity theft or financial fraud.
The named plaintiffs include Aaron Hunter of Ellenwood, Georgia; Kevin Manteufel of Neenah, Wisconsin; Anthony Walker of Alma, Georgia; Wendy Parnell of Bentonville, Arkansas; and Shileen Lange of Richmond, Virginia. Their cases seek to represent other people whose information was allegedly involved in the incident.
The litigation remains based on allegations. A lawsuit is not proof that the company violated the law, and the filings do not amount to a judicial determination that the breach occurred as alleged. The reported cases were brought in federal court in connection with the same incident.
Why the reported data matters
Social Security numbers, names and addresses are commonly used to identify consumers in financial and employment records. If exposed, such information can create risks that extend beyond the original breach, including attempts to open accounts or impersonate someone. The complaints describe that risk as serious and continuing, but they do not report a confirmed misuse of the information.
- At least four federal class-action lawsuits were filed by Oct. 29.
- The complaints say employee information may include Social Security numbers, names and addresses.
- The reported ransom demand was $5 million in cryptocurrency; the filings do not say whether it was paid.
