Routeway Logistics discovered attackers inside its network when dispatch systems began failing during a busy trading week. With deliveries at risk, the company needed answers and working systems at the same time.
Our responders joined within hours and organised the work into parallel streams: containment, investigation and recovery, with one clear update for leadership at every stage.
Investigation
Forensic analysis traced the intrusion to a compromised remote access account without MFA. A clear timeline showed which systems the attackers had touched, so leadership and counsel could make decisions based on facts.
Recovery
Clean systems were rebuilt from verified backups, starting with dispatch and tracking. All credentials were reset, persistence was removed and access was restored only after each system had been checked.
Results
Core delivery systems returned within 48 hours, and all attacker access was confirmed removed. Routeway has since adopted MFA for all remote access, tested its backups and added round-the-clock monitoring.
In the worst week of our company's history, they gave us a clear plan and kept it moving. Our trucks were rolling again within two days.
Recommended Projects
Stay Protected With Next-Generation Security
Protect your data, apps and users with 24/7 monitoring, fast incident response and audit-ready security built for growing teams.