Total Quality Logistics tql.com

Total Quality Logistics data breach: what happened and what to do

Total Quality Logistics (TQL) said it confirmed a breach of its systems on February 23, 2020. Carriers using TQL were told bank account and tax ID details in their accounts may have been exposed. No total has been published.

View all 13,177 breaches
Breach date
23 Feb 2020
Data exposed
Bank account numbers, Tax identification numbers
Last updated

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

What happened

Total Quality Logistics, one of the largest freight brokerages in the U.S., told carriers in February 2020 that hackers had breached its IT systems. TQL said it confirmed the breach on February 23, 2020. Some affected carriers weren't told until February 27. A TQL spokesperson later said it wasn't a malware or ransomware attack.

The breach also appears on California's Attorney General list, with a reported date in spring 2020. No total number of people has been published.

Sources checked: overdriveonline.com, thetruckersreport.com, databreaches.net

Last verified against the official page:

How we research this Report an error

What was exposed

Trade press reported that carriers were told information in their TQL accounts, including tax ID and bank account numbers, may have been accessed. TQL urged carriers to assume that bank and tax ID details were at risk. It said fewer than 20 carriers had been identified where theft through ACH (bank transfer) payments may have occurred.

A trucking company owner filed a lawsuit in federal court in Ohio, saying TQL didn't maintain reasonable security.

What that means for you

If you're a carrier or owner-operator, a bank account number and tax ID can be used to try to redirect payments or to open accounts and file returns as you. Fraudsters also impersonate brokers to ask carriers to change payment details, so verify any such request by calling a number you already have.

What to do if you were in it

  1. 1

    Talk to your bank

    Tell your bank the account number may have been exposed. Ask whether to close it and open a new one, and watch for ACH debits you didn't authorize.

  2. 2

    Verify any change in payment details

    If a broker or shipper asks you to change where you get paid, call back on a number you already have before you do.

  3. 3

    Protect your tax ID

    Report misuse of your tax or Social Security number at IdentityTheft.gov. Consider the FTC's guidance on freezing your credit.

  4. 4

    Expect messages that mention the breach

    Messages that mention TQL, loads or payments are the likeliest follow-up. Don't click links or call numbers in them. Go to the company's own website instead, as the FTC advises.

  5. 5

    Check whether your email or phone is in this and other breaches

    Run a free Serus scan. It checks breach databases for your email, phone and other details, and Serus keeps watching and alerts you when they show up in a new leak.

Official filings

Timeline

  1. The breach happened

  2. Reported to the California Attorney General

Frequently asked

When did the TQL breach happen?

TQL said it confirmed the breach on February 23, 2020 and told some affected carriers on February 27.

What was exposed?

Carriers were told bank account and tax ID numbers in their TQL accounts may have been accessed.

How many people were affected?

No total has been published.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Serus

Check if you're exposed in a breach with Serus

Find your leaks. Get alerted to new ones.

Run a free scan

Related guides

All guides

Related articles

All articles

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.