The J.B. Hunt data breach lawsuit was a proposed class action filed by driver applicant George Wilson in 2021 over exposed applicant names and Social Security numbers. For employees, the key point is that the case covered driver applicants rather than all workers, and defense counsel reports it was dismissed without compensation.
J.B. Hunt Transport Inc. is the Arkansas-based freight carrier at the center of that filing. A proposed class action is a lawsuit that seeks to represent a larger group with the same claim.
Official resources:
- Explore the official data from FTC — Use this primary source to review the underlying data.
- Read the official notice from Archive — Use this primary source to verify the official announcement.
Table of Contents
- What was exposed in 2020-2021?
- Who did the 2021 lawsuit cover?
- Did that case pay compensation?
- What is the 2026 Whitearmor claim?
- What should employees do now?
What was exposed in 2020-2021?
J.B. Hunt told regulators its driver-application Microsoft Power Apps portal was misconfigured from Aug. 17, 2020 to July 2, 2021. The affected files were identified Sept.
10, 2021, according to the Montana Department of Justice-hosted notice in the J.B. Hunt notification letter. The portal problem was part of a wider Power Apps permissions issue. Security researchers reported about 38 million records exposed across 47 organizations, including J.B. Hunt, American Airlines and Ford.
Who did the 2021 lawsuit cover?
Job applicant George Wilson filed the proposed class action as Case No. 5:21-cv-05194-TLB in the Western District of Arkansas on Nov. 1, 2021.
The filing alleged failure to safeguard applicant personally identifiable information, meaning data such as names and Social Security numbers, according to the filed federal complaint. That applicant focus matters for workers reading breach headlines. The case covered driver applicants who submitted data for employment consideration, not automatically every current employee.
Did that case pay compensation?
Defense counsel for J.B. Hunt states it obtained dismissal of the Wilson case on a motion to dismiss.
A motion to dismiss asks the court to end the case before trial or settlement. Employees should not treat that filing as a source of payment. No claims process or payout followed from that dismissed applicant case, according to the Mitchell Williams attorney record.
What is the 2026 Whitearmor claim?
On Oct. 23, 2026, ransomware tracker Ransomware.live recorded the group Whitearmor claiming J.B.
Hunt and alleging 140,838 employee records with PII and national IDs plus invoices, mailboxes and carrier contacts, with a $5 million BTC/XMR demand, as listed in the Ransomware.live incident record. Ransomware.live describes Whitearmor as an emerging group and urges cautious reading of its listings. Employees should treat that listing as a tracker-recorded extortion claim tied to employee data, separate from the earlier applicant portal case.
What should employees do now?
Watch for phishing that uses your name, job title or employment history. Save any breach notice, enrollment letter or suspicious message in one place. The Federal Trade Commission recommends these steps in the FTC breach response guide:.
- Monitor bank, payroll and benefits accounts plus credit reports for unfamiliar activity
- Consider a free credit freeze or fraud alert with the three credit bureaus
- Preserve notices and records of suspected misuse
- Report identity misuse at IdentityTheft.gov to get a personal recovery plan