FBI Warns of 60% Surge in Cyber-Enabled Cargo Theft, Reaching $725 Million in Losses
The **FBI** is warning the transportation and logistics industry about a significant increase in cyber-enabled cargo theft. Losses in the U.S. and Canada are estimated to have reached nearly $725 million in 2025, marking a 60% surge compared to the previous year due to criminals exploiting system vulnerabilities.

Cyber-enabled cargo theft is on the rise, with estimated losses in the United States and Canada reaching nearly $725 million in 2025, according to a warning issued by the **FBI**. This represents a 60% surge in losses compared to the previous year.
Confirmed cargo theft incidents rose 18 percent last year alone, while the average value per theft grew 36 percent to $273,990, due to more selective targeting of high-value loads. The bureau released a public service announcement on Wednesday detailing these threats.
### Tactics and Techniques
The **FBI** reports that threat actors have been infiltrating the computer systems of freight brokers and carriers through spoofed emails and fake web links since at least 2024. Once inside, criminals post fraudulent listings on online load boards and impersonate legitimate companies to divert shipments.
For example, in February, the typosquatting monitoring platform **Have I Been Squatted** reported that the **Diesel Vortex** financially motivated threat group was stealing credentials from freight and logistics operators in the U.S. and Europe in phishing attacks that had been running since September 2025 and were using 52 domains.
"The Federal Bureau of Investigation is publishing this Public Service Announcement (PSA) to warn the public of cyber threat actors increasingly using sophisticated, cyber-enabled tactics to impersonate legitimate businesses to hijack freight, steal high-value shipments, and reroute deliveries, resulting in a surge of strategic cargo theft," the **FBI** warned.
"Cyber threat actors target US transportation and logistics sectors, including companies with interests in shipping, receiving, delivering, and insuring cargo."

Attackers compromise broker or carrier accounts by luring employees to phishing sites that install remote monitoring software, gaining undetected access to the targeted company's systems. They then post tens of thousands of fake freight listings, tricking legitimate carriers into downloading malicious files, and accept real shipments under a stolen carrier identity. The loads are rerouted to complicit drivers, stolen for resale, and, in some cases, the criminals also demand ransoms for the location of diverted loads.
Threat actors linked to cyber-enabled cargo theft attacks will also alter the compromised carrier's registration details with the Federal Motor Carrier Safety Administration and update insurance records, thus ensuring that legitimate companies will discover they have been hacked until brokers report missing shipments booked in their name without their knowledge.
### Mitigation Strategies
To block cyber-enabled cargo theft attempts, the bureau urged transportation and logistics companies to:
* Verify all shipment requests through secondary channels.
* Implement and enforce multi-factor authentication when possible.
* Validate all unexpected communications using a two-factor authentication process.
* Maintain detailed records of all vehicles and drivers.
The **FBI** also advised victims of cyber-enabled cargo theft schemes to file a complaint with the Internet Crime Complaint Center (**IC3**) in addition to filing police reports for the stolen cargo.
In its 2025 Internet Crime Report, released earlier this month, the **FBI** said **IC3** received over 1 million complaints last year, linked to nearly $21 billion in reported losses from various cyber-enabled crimes, including investment scams, tech support fraud, business email compromise, and data breaches.

## 99% of What Mythos Found Is Still Unpatched.
AI chained four zero-days into one exploit that bypassed both renderer and OS sandboxes. A wave of new exploits is coming.
At the Autonomous Validation Summit (May 12 & 14), see how autonomous, context-rich validation finds what's exploitable, proves controls hold, and closes the remediation loop.
[Claim Your Spot](https://hubs.li/Q04crVgD0)