GPS Spoofing Turns Data Center Freight Into a High-Value Target

Introduction

The rapid expansion of AI and cloud infrastructure has created a new class of high-value cargo: servers, fiber-optic cable, memory chips, copper wire, cooling systems, and modular power equipment moving by highway. According to industry leaders, consultants, and investigators who spoke with NBC News, cargo thieves are increasingly targeting these shipments with a blend of cyber intrusion and physical diversion rather than relying on random roadside opportunities.

The investigators cited in the report said that nearly two dozen incidents have occurred since 2025 in states including California, Texas, and Utah. Since June, thieves have reportedly taken more than $100 million in data-center freight. The figures are reported estimates, not a complete public accounting of every theft.

How the scheme works

• Compromising freight accounts: Criminals allegedly break into broker accounts on shipment-listing platforms and post fake loads to attract legitimate carriers.
• Using malicious links: When a trucking company responds, it may receive a link carrying malware. A successful infection can give the attackers control of the company’s account, allowing them to bid on real, valuable shipments.
• Exploiting driver identity: A genuine driver may unknowingly be hired for a fraudulent move, while other operations rely on forged driver’s licenses and accomplices posing as qualified carriers.
• Redirecting the load: The shipment is eventually handed to a driver connected to the theft ring and moved for resale. Equipment may be broken into components and sold through gray-market channels.
• Defeating location monitoring: In one major case, an application tracking server-rack components reportedly received spoofed coordinates, showing that a location signal can be manipulated rather than merely lost.

Physical force has also appeared in some of the largest cases. In one theft involving computer server equipment valued at about $13 million, two off-duty police escorts lost sight of the trailer after an unmarked sedan struck their vehicle. In another case involving server-rack components estimated at roughly $10 million, an SUV hit the escort vehicle before the trailer escaped. Investigators described the crashes as deliberate, although the supplied material does not establish a final court finding.

More than an AI problem

The targeted cargo is not limited to servers. The Cook County Sheriff’s Office estimated that two recovered Illinois loads contained about $300,000 in copper wire and approximately $1 million in custom data-center modular power equipment. A Los Angeles County case involved cooling equipment traveling with nicotine pouches, televisions, shoes, printers, speakers, and skin-care products. That mix suggests that the broader freight ecosystem—not only AI companies—can absorb the cost of targeted theft.

Why it matters

Data-center hardware resembles “pure gold” from a thief’s perspective: it is expensive, concentrated, and potentially divisible into parts. Investigators told NBC News that some overseas buyers may be arranged before a theft, particularly in places where access to advanced technology is restricted. The material does not identify those buyers or prove that all cases are connected to one international network.

The main lesson for logistics operators is that GPS is only one layer of trust. A secure shipment also depends on the integrity of broker accounts, driver identities, carrier credentials, pickup instructions, and handoff procedures. Industry experts recommend slowing down high-value moves enough to perform background checks and verify customers and carriers through independent channels. State task forces are investigating major thefts, while lawmakers are considering a stronger federal response. Escort vehicles remain in use, but they cannot replace rigorous identity and access controls.

Source: Ars Technica AI