Cyberattack on Ceva Logistics Exposes Employee Data, Sparks Class Action Lawsuit
A former employee has filed a class action lawsuit against Ceva Logistics, alleging the global freight provider failed to safeguard sensitive personal data stolen in a July cyberattack that disrupted operations across eight warehouses in the Netherlands and Europe. The breach, attributed to the CoinbaseCartel ransomware group, compromised employee information, including bank account details and Social Security numbers.
The lawsuit, filed in late August in the U.S. District Court for the Southern District of Texas, claims Ceva neglected to implement adequate security measures despite a prior ransomware attack in September 2025, which the company never publicly disclosed. The complaint also alleges Ceva has not formally notified affected employees, leaving them vulnerable to fraud with the plaintiff reporting credit card fraud and increased spam calls as direct consequences.
The filing seeks class action status, citing at least 100 impacted employees (potentially thousands) and demanding $5 million in damages for alleged negligence, breach of contract, and unjust enrichment. The lawsuit argues Ceva prioritized cost-cutting over security, using "cheaper, ineffective measures" that left data exposed.
The incident coincides with leadership changes at Ceva, including the departure of two IT executives VP of IT Infrastructure Bryant Duke (November 2025) and Global CIO Susanne Shustein (March 2026). Parent company CMA CGM Group also reassigned Ceva’s CEO, Mathieu Friedberg, to a new role overseeing cybersecurity transformation, signaling broader concerns about enterprise-wide vulnerabilities.
Healthcare Sector Also Targeted
In a separate incident, McKesson Corp. confirmed a cybersecurity breach last week, with hackers allegedly the ShinyHunter group stealing customer and employee data from two business units. The group is demanding a $55 million ransom to prevent public release. McKesson joins a growing list of healthcare and medical device firms hit by ransomware in 2026, including Boston Scientific, which suffered a network outage in a recent attack.
CEVA Logistics cybersecurity rating report: https://www.rankiteo.com/company/ceva-logistics
Boston Scientific cybersecurity rating report: https://www.rankiteo.com/company/boston-scientific
"id": "CEVBOS1788361807",
"linkid": "ceva-logistics, boston-scientific",
"type": "Ransomware",
"date": "7/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'At least 100 employees '
'(potentially thousands)',
'industry': 'Logistics',
'location': 'Global (primarily Netherlands and Europe)',
'name': 'Ceva Logistics',
'size': 'Large',
'type': 'Freight/Logistics'}],
'data_breach': {'number_of_records_exposed': 'At least 100 (potentially '
'thousands)',
'personally_identifiable_information': 'Yes (Social Security '
'numbers, bank account '
'details)',
'sensitivity_of_data': 'High (bank account details, Social '
'Security numbers)',
'type_of_data_compromised': 'Employee personal data'},
'date_detected': '2026-07-01',
'date_publicly_disclosed': '2026-08-01',
'description': 'A former employee has filed a class action lawsuit against '
'Ceva Logistics, alleging the global freight provider failed '
'to safeguard sensitive personal data stolen in a July '
'cyberattack that disrupted operations across eight warehouses '
'in the Netherlands and Europe. The breach, attributed to the '
'CoinbaseCartel ransomware group, compromised employee '
'information, including bank account details and Social '
'Security numbers.',
'impact': {'brand_reputation_impact': 'Yes',
'data_compromised': 'Bank account details, Social Security numbers',
'financial_loss': '$5 million (claimed damages)',
'identity_theft_risk': 'Yes (credit card fraud, increased spam '
'calls reported)',
'legal_liabilities': 'Class action lawsuit filed',
'operational_impact': 'Disrupted operations across eight '
'warehouses',
'payment_information_risk': 'Yes',
'systems_affected': 'Warehouse operations in the Netherlands and '
'Europe'},
'investigation_status': 'Ongoing',
'motivation': 'Financial gain',
'post_incident_analysis': {'corrective_actions': 'Leadership changes (CEO '
'reassignment, IT executive '
'departures)',
'root_causes': 'Alleged failure to implement '
'adequate security measures, '
'cost-cutting over security'},
'ransomware': {'data_exfiltration': 'Yes',
'ransomware_strain': 'CoinbaseCartel'},
'references': [{'source': 'Class action lawsuit filing'}],
'regulatory_compliance': {'legal_actions': 'Class action lawsuit filed in '
'U.S. District Court for the '
'Southern District of Texas'},
'response': {'communication_strategy': 'No formal notification to affected '
'employees'},
'threat_actor': 'CoinbaseCartel',
'title': 'Cyberattack on Ceva Logistics Exposes Employee Data, Sparks Class '
'Action Lawsuit',
'type': 'Ransomware'}