Published: 28/08/2026
Updated: 10/09/2026
On 26 August 2026, we became aware of an incident involving ransomware on certain of our systems. We immediately took steps to secure our technical environment and mitigate the impact of this incident. Our platform has been restored and is operational.
An investigation into the source, extent and implications of the incident is underway, conducted by our technology teams, with support from cybersecurity experts.
The safety and security of our clients’ information remains our priority.
Subsequently, we identified that personal information relating to certain Cartrack customers, which was accessed during the incident, may have been published on a restricted-access site used by the threat actor.
We have taken the following steps to protect affected data subjects and mitigate the potential impact:
- isolated affected servers and took immediate steps to contain the incident and prevent further spread of the attack;
- restored our platform within five hours of detecting the incident on 26 August 2026;
- strengthened access controls, security monitoring and other protective measures across our environment;
- prompted customers to update their Cartrack passwords as a precautionary measure;
- engaged independent cybersecurity specialists to conduct a comprehensive forensic investigation;
- reviewed and strengthened our technical and organisational security measures;
- updating our notification to affected data subjects to inform them of the publication of personal information and advise them of protective measures they can take; and
- notified and continue to cooperate with the Information Regulator and relevant law enforcement authorities.
We will continue to investigate the nature and extent of the information accessed and published and will keep the Information Regulator informed of any further material developments in this matter. We will provide notifications to affected parties when and if required.
