# ROANE TRANSPORTATION SERVICES, INC.
## Rockwood, Tennessee | DOT# 652055 | roanetrans.com
—
### YOUR COMPANY HAS BEEN COMPROMISED
We have obtained complete access to your internal file systems and extracted a full copy of your corporate data. This includes all divisions: **Roane Transportation Services (RTS)**, **Roane Logistics (RLI)**, **Roane Metal Group (RMG)**, **Roane Specialized**, and **B&W**.
This is not a bluff. Below is a summary of what we hold.
—
### DATA IN OUR POSSESSION
**EMPLOYEE PERSONAL DATA**
– 262 employee files containing Social Security Number scans (PDF), driver’s licenses (CDL), DOT medical examination cards, drug screening results, I-9 employment verification forms, background check reports (PSP/MVR), tax withholding forms, and direct deposit authorizations
– Complete payroll records with full names, bank routing numbers, and account numbers for all current employees across RTS and RLI divisions
**FINANCIAL & BANKING**
– ACH payment files containing 351 bank account numbers (routing + account) for employees, contractors, and carrier partners
– First Horizon Bank online banking credentials
– State tax portal login credentials for 20+ US states (TN, KY, GA, OH, PA, VA, NC, IN, AL, MS, LA, MO, WV, NM, NE, OR, SC, IL, NY, AR)
– QuickBooks financial data
– Payroll ACH batch files with individual salary amounts
– Settlement payment records for 112 carrier/vendor relationships
– Insurance loss reports spanning 2008 through 2025
– Positive Pay check verification data
**CREDENTIALS & ACCESS**
– 200+ plaintext username/password combinations exported from employee browsers, covering Microsoft 365, banking portals, fleet management (Samsara, OmniTracs), customer billing portals, insurance providers, government tax systems, and personal accounts
– Customer portal credentials for 39 business partners including Nucor, Ryder, Cleveland Cliffs, US Bank, Valmont, SiteOne, Megacorp, Hubbell, CMC, Builders FirstSource, and others
– Your Carbon Black security product license information
– Acronis backup system license keys
– CheckPoint VPN configuration data
**DOT / FMCSA COMPLIANCE**
– DOT audit files
– Drug and alcohol testing results for all drivers
– DOT medical examination certificates
– FMCSA inspection and violation records
– Accident and incident reports spanning multiple years
– CSA score documentation
**BUSINESS INTELLIGENCE**
– 949-entry contact database (drivers, customers, vendors, suppliers)
– Customer contracts and rate agreements
– IFTA fuel tax reports (all states, 2021–2025)
– Complete fleet and driver assignment records
– Internal HR files for current and terminated employees
– Workers’ compensation claim records
—
### WHAT THIS MEANS FOR YOU
If this data becomes public:
1. **Mandatory breach notification in all 50 US states** for SSN and financial data exposure — estimated cost: $500,000 – $1,000,000 in notification, credit monitoring, and legal fees alone
2. **FMCSA regulatory action** — exposure of drug test results and DOT medical records creates grounds for federal compliance investigation. Potential suspension or revocation of operating authority under 49 CFR Part 382
3. **Employee lawsuits** — 262 individuals with exposed Social Security Numbers and bank accounts will have grounds for identity theft class action litigation. Average settlement: $5,000 – $50,000 per affected person
4. **Customer relationship damage** — 39 business partners whose portal credentials were stored in plaintext will be notified. Nucor, Cleveland Cliffs, Ryder, US Bank, and others will terminate carrier agreements and pursue damages
5. **Financial fraud exposure** — bank routing numbers, account numbers, and online banking passwords enable direct financial theft. Every employee and carrier partner will need to change bank accounts immediately
6. **Tax fraud liability** — login credentials for 20+ state tax portals enable fraudulent filings. State revenue departments will freeze accounts pending investigation
7. **Total estimated exposure: $5,000,000 – $15,000,000** in regulatory fines, legal costs, settlements, lost business, and remediation
—
### PROOF OF DATA
We will provide a sample data package upon request in this chat to verify authenticity. This may include:
– Partial employee SSN document samples (redacted)
– ACH file headers showing bank routing information
– Portal credential samples
– Payroll records with employee names and amounts
—
### OUR TERMS
We are prepared to:
– Permanently delete all copies of your data
– Provide proof of deletion
– Never disclose or publish any information
– Provide a full list of accessed systems for your security remediation
**In exchange, we require a one-time payment. The amount will be discussed in this chat.**
—
### DEADLINE
You have **168 hours (7 days)** from the moment this message was posted to initiate contact and begin negotiations.
**After the deadline:**
– Phase 1: Data samples will be sent directly to your customers (Nucor, Ryder, Cleveland Cliffs, US Bank, SiteOne)
– Phase 2: Full dataset published on our public blog
– Phase 3: FMCSA, state attorneys general, and IRS notified with supporting evidence
**The timer is running.**
—
*To begin the conversation, type your message below. All communications are encrypted and confidential. We respond within 2 hours during business days.*
- Group: inc ransom
- Discovered: 2026-11-10 22:33 UTC
This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.
Source: RansomLook — Recent Posts · 2026-11-10