What happened
Ars Technica reported on October 26, 2026, drawing on NBC News interviews with industry leaders, consultants, and investigators, that thieves have taken more than $100 million in freight intended for data centers since June. The reported targets include servers, fiber-optic cable, memory chips, copper wire, Bitcoin-mining machines, power equipment, cooling equipment, and server-rack components.
The theft method is described as a combination of digital account compromise and physical logistics fraud. Investigators said criminals first gain access to freight-broker accounts on shipment-listing sites and post fake loads to attract bids from legitimate trucking companies. A malicious link sent to respondents can install software that gives the attackers control of the trucking company’s account. They can then bid on actual shipments. In some cases, an unwitting legitimate driver collects the cargo; in others, accomplices reportedly use fake driver’s licenses to get hired. The shipment is then transferred to a driver working with the group.
Location tracking has not always stopped the thefts. In one case involving server-rack components valued at about $10 million and headed from California to Texas, investigators said tracking coordinates were apparently spoofed. In another, a trailer carrying several hundred pounds of computer-server equipment valued at $13 million was headed for Fayetteville, Georgia. According to the report, an unmarked sedan struck the vehicle carrying off-duty police escorts, forcing it to stop while the trailer continued. A similar incident involved an SUV striking an escort vehicle on another California-to-Texas shipment.
Some recovered loads show the scale and variety of equipment involved. The Cook County Sheriff’s Office estimated that two Illinois freights contained roughly $300,000 in copper-wire spools and about $1 million in custom-made modular data-center power equipment. A Los Angeles County case recovered data-center cooling equipment destined for Deepcool AI alongside unrelated retail goods.
The report says there have been nearly two dozen incidents since 2025 in California, Texas, Utah, and other states. Verisk CargoNet’s Keith Lewis characterized the goods as unusually attractive because they can be broken into components and sold through gray markets; investigators said overseas buyers may be arranged in advance. TAPA Americas chair Scott Cornell argued that inadequate driver vetting is a central weakness. Companies are increasing escorts, while states form specialized task forces and lawmakers discuss federal responses.
What the archive adds
We have not covered this before; it opens a new thread.
Trend signal
No supplied New Runtime pattern genuinely fits this physical supply-chain incident.
Why it matters
AI infrastructure plans commonly treat hardware delivery as an execution detail after capacity is purchased. This report suggests it belongs in the risk model. A delayed or diverted shipment can affect construction schedules, cluster expansion, replacement inventory, insurance exposure, and the availability assumptions behind an AI product roadmap.
The important point is not that every team needs armed escorts. It is that a tracking dashboard alone is not a security boundary. If a broker account, driver identity, dispatch communication, or location signal can be manipulated, a shipment may appear legitimate until it has already been redirected. Teams buying high-value infrastructure should ask their vendors and logistics partners how they validate carriers, protect accounts, handle delivery changes, and reconcile physical custody with digital records.
What happens next
- Freight operators serving data-center projects will expand identity and account-verification requirements. (3 months, 70%). Watch for: carrier-verification procedures or broker platform security notices.
- More high-value data-center loads will use layered monitoring rather than a single location application. (6 months, 60%). Watch for: logistics contracts specifying independent tracking and custody checks.
- Law-enforcement and industry groups will publish more guidance on technology-cargo theft. (6 months, 65%). Watch for: task-force announcements or TAPA Americas advisories.
Limits and uncertainty
The supplied source is an Ars Technica report summarizing NBC News reporting and interviews; it does not provide underlying case files, a complete incident database, or an independently auditable accounting of the $100 million estimate. It also does not establish how much of the theft activity is directly caused by AI-data-center expansion, rather than a broader increase in high-value cargo crime. The reported use of AI-generated fake licenses is presented as an investigative claim, not as a technical analysis of the documents or systems involved. The examples show serious failures, but cannot quantify risk for a particular route, supplier, or project.
Skill to build now
Run a short delivery-chain review for any high-value hardware order. Identify who can alter a pickup, carrier, route, delivery address, or receiving contact; require an out-of-band confirmation for changes to those fields. Ask whether freight-broker and carrier accounts use strong authentication, and ensure that dispatch staff know not to treat email links or a single location feed as sufficient proof of identity or custody. Finally, assign a named receiver who can reconcile serial numbers, seals, delivery documentation, and the original purchase order at handoff.
Reader takeaway
The AI buildout has created cargo valuable enough to attract organized, digitally enabled theft. Hardware procurement is therefore not only a capacity and finance problem: teams need trustworthy carrier identities, change controls, and multiple ways to verify where expensive equipment is and who has custody of it.
Open question
Will data-center buyers begin to make carrier verification, account security, and independent custody evidence standard contractual requirements rather than optional logistics services?