itstargetnews
newYou can listen to Fox News articles now!
Cargo theft is no longer just about stolen trucks and forged documents. Over the past year, security researchers have been warning that hackers are increasingly targeting the technology behind global shipping, quietly manipulating systems that move millions of dollars worth of goods.
In some cases, organized crime groups use Logistics platform hacked Redirecting shipments allows criminals to steal goods without ever setting foot in the warehouse. A recent case involving a major U.S. shipping technology provider illustrates how exposed certain parts of the supply chain can be, and for how long.
Sign up for my free CyberGuy report Get my best tech tips, emergency security alerts, and exclusive offers delivered right to your inbox. Plus, when you join my site, you’ll get immediate, free access to my Ultimate Scam Survival Guide CYBERGUY.COM communication
An important transport platform is fully open
Digital shipping platforms now control how goods move around the world, making cybersecurity failures a direct risk to global supply chains. (John Keble/Getty Images)
The company at the center of the incident is Bluspark Global, a New York-based company whose Bluvoyix platform is used by hundreds of companies to manage and track shipments around the world. While Bluspark isn’t a household name, its software powers a large portion of global shipping, including major retailers, grocery chains, and manufacturers.
For months, Bluspark has reportedly had a fundamental security flaw in its systems that left its shipping platform exposed to anyone on the internet. According to the company, five vulnerabilities were ultimately fixed, including the use of clear text passwords and the ability to remotely access and interact with the Bluvoyix platform. The flaws could have allowed attackers to access decades of shipping records and customer data.
Bluspark says these issues have now been resolved. But the timetable before a fix raises serious concerns about how long the platform was vulnerable and how difficult it would be to alert companies in the first place.
How researchers find flaws
Security researcher Eaton Zveare discovered the vulnerabilities while inspecting Bluspark customers’ websites in October. What started as a routine contact form review quickly escalated. By looking at the website’s source code, Zveare noticed that messages sent through the form passed through Bluspark’s servers using an application programming interface (API).
From there, things unraveled quickly. The API’s documentation is publicly accessible and includes built-in functionality that allows anyone to test commands. Despite claiming to require authentication, the API returned sensitive data without any login. Zveare was able to retrieve large amounts of user account information, including employee and customer usernames and passwords stored in clear text.
Worse, the API allows new administrator-level accounts to be created without proper checks. This means an attacker could grant themselves full access to Bluvoyix and view shipment data dating back to 2007. It’s even possible to completely bypass security tokens designed to restrict access.
Why it takes weeks to fix critical shipping safety flaw
One of the most disturbing parts of this story is not just the vulnerabilities themselves, but how difficult it is to fix them. After discovering the breach, Zveare spent weeks trying to contact Bluspark, sending emails, voicemails and even LinkedIn messages, without success.
no clear Vulnerability disclosure process Once in place, Zveare eventually turned to the Maritime Hacking Village, which helps researchers inform companies in the shipping and maritime industries. When this failed, he contacted the media as a last resort.
The company has since responded through its legal counsel. Bluspark later confirmed that it had patched the flaws and said it planned to launch a formal vulnerability disclosure program. The company did not disclose whether it found evidence that attackers used the vulnerabilities to manipulate shipments, saying only that there was no indication of an impact on customers. It also declined to disclose details about its security practices or any third-party audits.
10 ways to stay safe when cyberattacks hit your supply chain
Hackers can break into a shipping or logistics platform without you realizing that your data is involved. These steps can help you reduce your risk in the event of such an attack.
1) Be wary of delivery-related scams and false delivery notifications
After a supply chain breachcriminals often send phishing emails or text messages pretending to be shipping companies, retailers, or delivery services. If a message forces you to click on a link or “confirm” shipment details, slow down. Go directly to the retailer’s website rather than trust the news.
2) Use a password manager to protect your account
If an attacker gains access to a customer database, they will often try the same login details for shopping, email, and bank accounts. A password manager ensures that each account has a unique password, so one breach doesn’t give an attacker access to the keys to every other account.
Next, look at your Email has been exposed in past violations. Our #1 Password Manager (See Cyberguy.com) pick includes a built-in vulnerability scanner that checks if your email address or password appears in a known leak. If you find a match, immediately change any reused passwords and secure those accounts with new, unique credentials.
Check out the best expert-reviewed password managers of 2026: Cyberguy.com
3) Reduce your personal data exposed online
Security researchers discovered that the exposed API allowed access to sensitive shipping data without proper authentication. (Portela/Getty Images)
Criminals often combine data from a breach with information scraped from data broker websites. Personal data deletion services can help reduce the amount of information that is made public, making it harder for criminals to target you with convincing scams.
While no service can guarantee complete removal of your data from the internet, data removal services are certainly a smart choice. They’re not cheap, and neither is your privacy. These services do all the work for you by proactively monitoring and systematically removing your personal information from hundreds of websites. This gives me peace of mind and has proven to be the most effective way to remove personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing breached data with information they might find on the dark web, making it harder for them to target you.
Check out my picks of data removal services and find out if your personal information has been exposed online by visiting a free scan Cyberguy.com
Scan for free to find out if your personal information has been exposed online: Cyberguy.com
4) Run strong antivirus software on your device
Powerful antivirus software blocks malicious links, fake shipping pages, and Attachments containing malware This often occurs after a high-profile breach. Keeping real-time protection enabled adds an important layer when criminals try to exploit chaos.
The best way to protect yourself from malicious links that install malware and potentially access your private information is to install strong antivirus software on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the winners of the best antivirus protection of 2026 for your Windows, Mac, Android, and iOS devices: Cyberguy.com
Massive data leak, 14 million customer transportation records exposed
5) Enable two-factor authentication where possible
Two-factor authentication (2FA) makes it harder for attackers to take over an account, even if they have your password. Prioritize email, shopping accounts, cloud storage, and any service that stores payment or shipping information.
6) View your account activity and delivery history
Check your online shopping account for unfamiliar orders, address changes, or saved payment methods you don’t recognize. Catching changes early can prevent fraud from escalating.
7) Consider identity theft protection
Identity theft protection services can alert you to suspicious credit activity and help you recover if an attacker gains access to your name, address, or other personal details. Identity theft companies can monitor personal information such as your Social Security number (SSN), phone number, and email address and alert you when it is sold on the dark web or used to open an account. They can also help you freeze your bank and credit card accounts to prevent further unauthorized use by criminals.
See my tips and best options on how to protect yourself from identity theft: Cyberguy.com
8) Free credit freeze to stop new fraud
If your name, email, or address has been compromised, consider placing a credit freeze with the major credit bureaus. A freeze prevents criminals from opening new accounts in your name, even if they later obtain other personal data. It’s free, easy to temporarily lift, and one of the most effective steps you can take after a breach. To learn more about how to do this, visit Cyberguy.com and search “How to Freeze Your Credit.”
9) Lock your shipping and retailer accounts
Check the security settings for your major shopping and delivery accounts, including retailers, grocery services, and shipping providers. Pay close attention to your saved shipping addresses, default shipping locations, and linked payment methods. Attackers sometimes quietly add their own addresses and wait before taking action.
10) Enterprises should review third-party logistics access
If you run a business that relies on a transportation or logistics platform, events like this will remind you to check your supplier access controls. Limit administrative rights, rotate API keys regularly, and confirm that the vendor has a clear vulnerability disclosure process. Supply chain security depends on more than just your own systems.
Hackers are increasingly targeting logistics technology, manipulating systems to redirect shipments without physical theft. (Thomas Trutcher/Photothek via Getty Images)
Kurt’s key takeaways
The shipping platform is located at The intersection of physical goods and digital systems makes them an attractive target for cybercriminals. When basic protections like authentication and password encryption are missing, the consequences can spill over into the real world, from stolen goods to supply chain disruptions. The incident also highlights how many companies still lack a clear, public way for researchers to responsibly report vulnerabilities.
Do you think the companies that quietly power global supply chains are doing enough to protect themselves from cyber threats? Please write to us Cyberguy.com
Click here to download the Fox News app
Sign up for my free CyberGuy report Get my best tech tips, emergency security alerts, and exclusive offers delivered right to your inbox. Plus, when you join my site, you’ll get immediate, free access to my Ultimate Scam Survival Guide CYBERGUY.COM communication
Copyright 2026 CyberGuy.com. all rights reserved.
