Uber Freight is investigating unauthorised access to part of its systems after the Helix extortion group claimed it had stolen almost one million files. The logistics company says it contained and remediated the incident, involved federal law enforcement, and suffered no disruption to its daily operations; the case highlights continued risks to major transport networks from data-extortion attacks.

Helix listed Uber Freight on its leak site on 6 August and said the material came from email inboxes, OneDrive, accounts receivable and other repositories, though the company did not verify the files’ authenticity. Researchers link Helix to the UNC6671 cluster, whose operators commonly impersonate IT helpdesk staff by phone to steal credentials and cloud-service sessions; Uber Freight says it manages 18 million shipments annually, representing more than $17 billion in goods.