Watch Now


Estes reports all systems are back online after cyberattack

President and COO Webb Estes reviews restored functions, praises customers that stuck around

Estes Express continues to make progress coming back from a cyber attack. (Photo: Jim Allen/FreightWaves)

Editor’s note: This story was updated at 6:30 p.m. on Oct. 24 to reflect new information from Estes.

The president of Estes Express went online Tuesday to announce all the company’s operations are back to normal and it has overcome a massive cyberattack.

Tuesday’s announcement came just a few days after Webb Estes took to a public video platform to report that most of the key operations at the LTL carrier that bears his family name have been fixed after a cyberattack early this month. In the video, Webb Estes said all systems had been restored.

The precise date of the start of the Estes cyberattack is not clear, but it became known in the industry by the start of the workweek that began Oct. 2. 


Webb Estes said last week the company is “working tirelessly to complete the restoration of our systems and make them even safer,” suggesting then that the entire task of rebuilding after the attack is not complete. However, he did not offer specifics on what systems remain down.

Most importantly, Webb Estes said the company’s application programming interface connections with customers and other counterparties are back online. APIs have been defined as “a set of programming code that enables data transmission between one software product and another.” 

“Our API connections are available to integrate our shipping functionality into our customers’ business applications and websites,” Webb Estes said in the recording. 

He also said the company had restored the “image document retrieval API.” But that takes time, and Webb Estes said “we’re working hard to get all scanned images into our system so invoicing can resume soon with our APIs.” 


Since the Oct. 6 update, the company’s website also was restored, as was its phone service.

Given that Estes is not a public company, outsiders will not be able to ascertain how much of a hit the company took on its cybersecurity attack. The only analogy that could be made, given that they are both LTL carriers, would be to the fourth-quarter 2020 attack at Forward Air (NASDAQ: FWRD). 

The companies are admittedly different; Forward Air is an LTL carrier but with its activities focused on moving airfreight. But its Q4 2020 revenue of $350.3 million was followed by first-quarter 2021 revenue of $362.2 million. By the fourth quarter of 2021, revenue had climbed to $459.9 million, admittedly in the midst of a historically good freight market.

In several of his daily updates, chief Deutsche Bank transportation analyst Amit Mehrotra suggested that the third-quarter earnings calls of publicly traded LTL carriers might give some suggestion about how much Estes business was moved over to other companies.  However, private conversations with some LTL executives suggest the size of any lost business was minimal, with at least one executive at a leading LTL provider saying his company had seen almost no increase in business that could be attributed to the Estes hack.

Webb Estes gave no hint how large the impact on its business might be as it switched to a more manual system during the cyberattack. But he heaped praise on customers that had remained. 

“We continue to see our customers choosing Estes for their shipping needs,” Webb Estes said. “We know you have choices. So we’d like to thank our many customers who’ve stuck by us through this challenge. Your trust in us has helped drive efforts toward returning online quickly, responsibly and safely. We’ve hardened our technology environment, and we’re building back stronger than ever. Again, please accept my sincere thanks for your patience and trust.”

More articles by John Kingston

Taking stock of what happened at Estes


TriumphPay’s EBITDA loss narrows, volume increases, factoring invoices stay flat

XPO’s Jacobs on his next venture: Wait and see

4 Comments

  1. David

    Eric Robinson you can say what you want about these companies and Renee to both of you estes is a good family owned company I’ve met 3 generations of the family they are all about the customer and the valued employees as a former employee of 18 years I had to leave due to health issues I recommend estes to anyone customer or employment from being a dock worker city driver to a linehaul drive we strive to make the customer happy and care for the people handling their freight from start to finish this cyber attack did cause major issues but it was nothing to do with estes everything behind the scene from every position in the company did what the could possibly do to move freight from cell phones to social media groups to communicate god bless

  2. Renee

    Estes is a horrible company. Home Depot uses them. They imput it was delivered, when in fact the product wasn’t delivered! I will never use Home Depot again because they ship with Estes! No wonder why almost no one stuck around! You don’t do your job! No tracking should say Delivered if it isn’t!

  3. James

    I’ m a small market LTL driver. I had three shipments diverted just to my truck over this. High volume shipper that went to the second choice to get it done. Bulky and heavy Estes will get it back but they did lose on this.

Comments are closed.

John Kingston

John has an almost 40-year career covering commodities, most of the time at S&P Global Platts. He created the Dated Brent benchmark, now the world’s most important crude oil marker. He was Director of Oil, Director of News, the editor in chief of Platts Oilgram News and the “talking head” for Platts on numerous media outlets, including CNBC, Fox Business and Canada’s BNN. He covered metals before joining Platts and then spent a year running Platts’ metals business as well. He was awarded the International Association of Energy Economics Award for Excellence in Written Journalism in 2015. In 2010, he won two Corporate Achievement Awards from McGraw-Hill, an extremely rare accomplishment, one for steering coverage of the BP Deepwater Horizon disaster and the other for the launch of a public affairs television show, Platts Energy Week.