A ransomware attack on Burlingame-based freight company K-Apex exposed customers' Social Security numbers, the company disclosed in notification letters dated Wednesday, July 9.

Apex Maritime Co., Inc., which operates as K-Apex out of its headquarters at 877 Mahler Road, reported the breach to the Massachusetts Attorney General on Monday, July 14. The ransomware group TITAN claimed responsibility for the attack on Monday, May 19, posting on the dark web that it had obtained company data and planned to publish it within 10 to 11 days.

Social Security numbers are the only category of personal information confirmed exposed so far. The total number of people affected has not been disclosed.

In the notification letter signed by Lena Cheung, the company's corporate secretary, K-Apex stated there is no evidence the exposed information has been misused. The company is offering affected individuals 24 months of free credit monitoring through Cyberscout, with an enrollment deadline of October 7.

What residents should do

K-Apex's letter advises anyone who received a notification to:

  • Enroll in the free credit monitoring at bfs.cyberscout.com/activate using the code F8EE5B84989F within 90 days of July 9
  • Place a fraud alert or security freeze with Equifax (1-888-766-0008), Experian (1-888-397-3742), or TransUnion (1-800-680-7289)
  • Order a free credit report at annualcreditreport.com or by calling 1-877-322-8228
  • Report suspected identity theft to local law enforcement, the state Attorney General, or the Federal Trade Commission at 1-877-438-4338

A dedicated call center is available at 1-800-405-6108, Monday through Friday, 8 a.m. to 8 p.m. Pacific time, for 90 days from July 9, excluding holidays.

Class action investigation underway

Shamis & Gentile P.A., a national class action law firm, announced on Tuesday, July 21 that it is investigating the breach on behalf of affected individuals. No formal lawsuit has been filed. People who believe their data was compromised can submit information at claimdepot.com/investigations/apex-data-breach-2026.

K-Apex, founded in 1990, is part of the KLN Logistics Group and operates as a major non-vessel-operating common carrier in the Trans-Pacific trade, according to the company's corporate profile.

Residents with questions can reach K-Apex's dedicated breach response line at 1-800-405-6108 or write to 877 Mahler Road, 2nd Floor, Burlingame, CA 94010.