Yellow Corporation, which filed for Chapter 11 bankruptcy in August 2023, experienced a data security incident on March 27, 2025. This direct cyberattack on Yellow's internal network resulted in unauthorized access and exfiltration of files. The company issued an official notice of the event on June 26, 2026.
The breach primarily affected former employees. While an exact number of affected individuals remains unidentified, the incident compromised highly sensitive data types, including names, Social Security numbers, dates of birth, driver’s license and state ID numbers, passport numbers, financial account numbers, payment card numbers, medical information, and health insurance information. The company has stated it was unable to identify or verify contact information for most affected individuals, necessitating public notice.
Details about the full scope and impact of this data breach may emerge over time, and regulatory actions or consumer notifications can be delayed.